PT-2024-19542

Name of the Vulnerable Software and Affected Versions Form Tools version 3.1.1 Description A Server Side Template Injection SSTI issue allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application. Recommendations For Form Tools version 3.1.1,...

PT-2021-20115

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.0.0 through 7.3.2 Liferay DXP 7.0 before fix pack 94 Liferay DXP 7.1 before fix pack 19 Liferay DXP 7.2 before fix pack 6 Description The Dynamic Data Mapping module does not properly check user permissions, allowing...