Liferay Portal and Liferay DXP Elevation of Privilege Vulnerability

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform. Liferay Portal and Liferay DXP are both digital experience collaboration platforms. Liferay Portal and Liferay DXP are vulnerable to an elevation of privilege vulnerability that could be exploited by an attacker to take over a company administrator user account through editing.