CVE-2021-33330

Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharing (CORS) protected resources if the…

published August 3, 2021

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharing (CORS) protected resources if the user is only authenticated using the portal session authentication, which allows remote attackers to obtain sensitive information including the targeted user’s email address and current CSRF token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01122 · 66.0th percentile
Published
2021-08-03T18:50Z
EPSS history
Timeline
  • 03 AUG 18:50Z
    Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharing (CORS) protected resources if the…
    cvelistv5