CVE-2021-33320

The Flags module in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 5, does not limit…

published August 3, 2021

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

The Flags module in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 5, does not limit the rate at which content can be flagged as inappropriate, which allows remote authenticated users to spam the site administrator with emails

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01162 · 67.0th percentile
Published
2021-08-03T18:09Z
EPSS history
Timeline
  • 03 AUG 18:09Z
    The Flags module in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 5, does not limit…
    cvelistv5