Lucene search
GoogleOSV:GHSA-6XXC-4JC4-7JV3HistoryMay 24, 2022 - 10:28 p.m.
Exposure of Resource to Wrong Sphere in Liferay Portal
2022-05-2422:28:20
Google
osv.dev
5
0.001 Low
EPSS
Percentile
50.7%
Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharing (CORS) protected resources if the user is only authenticated using the portal session authentication, which allows remote attackers to obtain sensitive information including the targeted user’s email address and current CSRF token.
Related
nvd
nvd
CVE-2021-33330
2021-08-03 19:15:08
prion
prion
Cross site request forgery (csrf)
2021-08-03 19:15:00
osv
osv
CVE-2021-33330
2021-08-03 19:15:08
github
github
Exposure of Resource to Wrong Sphere in Liferay Portal
2022-05-24 22:28:20
cvelist
cvelist
CVE-2021-33330
2021-08-03 18:50:43
cnvd
cnvd
Liferay Portal and Liferay DXP have unspecified vulnerabilities
2021-08-05 00:00:00
cve
cve
CVE-2021-33330
2021-08-03 19:15:08