2 matches found
CVE-2021-33323
The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user...
7.5CVSS7.1AI score0.01028EPSS
SaveExploits0References1
CVE-2021-33323
The CVE-2021-33323 entry describes a vulnerability in the Dynamic Data Mapping module of Liferay Portal 7.1.0–7.3.2 and Liferay DXP 7.1 (before fix pack 19) and 7.2 (before fix pack 7), where autosaving of form values for unauthenticated users can be viewed by loading the form as an unauthenticat...
7.5CVSS7.6AI score0.01028EPSS
SaveExploits0References2Affected Software2
20