Liferay Portal and Liferay DXP code issue vulnerability

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform. Liferay Portal and Liferay DXP are both digital experience collaboration platforms. Liferay Portal and Liferay DXP are vulnerable to a code issue that could be exploited by an attacker to change a user’s password via an old password reset token.