Known Vulnerabilities

Severity 2 In Liferay Portal 7.0 CE GA7, the password for a Form's REST data provider does not obfuscate the password leading to password disclosure. Liferay Portal 7.1.0 Liferay Portal 7.1.0...

In Liferay Portal 7.0 CE GA7, a flaw in the code used to prevent open redirects allows some crafted URLs to circumvent the open redirect prevention logic. Severity 2 Liferay Portal 7.1.0...

Liferay Portal 7.1.0 Liferay Portal 7.1.0 7.0.6-ce-ga7-security-1.0 patch (source) Severity 2 In Liferay Portal 7.0 CE GA7, blogs titles are visible to users without the appropriate view...

Some vulnerabilities reported by Gergő Czuczor Severity 2 In Liferay Portal 7.0 CE GA7, multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or...

Multiple cross-site request forgery (CSRF) vulnerabilities allow remote attackers to execute unwanted actions in the portal. Workaround: Remove the following lines from the...

Severity 1 In Liferay Portal 7.0.5 and earlier, the Web Proxy portlet/application allows remote attackers to execute arbitrary code via supplied stylesheet. Patched versions of the portal will...

Liferay Portal 7.0.6 The portal may be vulnerable to BREACH attacks if the portal is using HTTPS and compression (GZip) is enabled. Workaround: Disable compression by setting...

Severity 2 The "doAsUserId" parameter used by Administrators for impersonating another user can be leaked to third party sites. Liferay Portal 7.0.6 Liferay Portal 7.0.6

The asset tag API leaks information about the user who created the asset tag. Severity 2 Liferay Portal 7.0.6 Liferay Portal 7.0.6

Liferay Portal 7.0.6 Liferay Portal 7.0.6 Severity 2 Multiple permission issue allows users to perform actions on resources which they are not authorized to perform.

A reflected cross-site scripting (XSS) vulnerability exist on the JSONWS API page. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a page....

Severity 2 Apache Commons Email is vulnerable to SMTP header injection (CVE-2017-9801). Liferay Portal is not vulnerable, however, custom modules/apps using the Commons Email JAR bundled with the...

Liferay Portal 7.0.5 Liferay Portal 7.0.5 Severity 2 Content spoofing is possible via URL manipulation in applications that suppor tags. An attacker can potentially exploit this security...

All files within the application's WAR folder is accessible via crafted URL. Severity 1 Liferay Portal 7.0.5 Liferay Portal 7.0.5

Severity 2 Open redirect vulnerability in the Asset Publisher application allows remote attackers to redirect users to arbitrary web sites. Liferay Portal 7.0.5 Liferay Portal 7.0.5 This issue was...

Severity 1 Liferay Portal 7.0.5 Liferay Portal 7.0.5 Unauthenticated users can modify system settings to gain administration privileges.

Severity 1 In Liferay Portal 7.0.4 and earlier, when Xuggler is enabled for video conversion, a large number of temporary files may be created during video playback, which allows remote users to...

Passwords are visible to administrators in the System Settings section of the Control Panel. Severity 2 Liferay Portal 7.0.5 Liferay Portal 7.0.5

Severity 2 Multiple permission issue allows users to perform actions on resources which they are not authorized to perform. Liferay Portal 7.0.5 Liferay Portal 7.0.5

Liferay Portal 7.0.5 Some vulnerabilities reported by Marko Winkler Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML into a page....

Severity 2 In a shared environment (e.g., a computer at a library or internet cafe), a user's reminder query answer may be accessible by another user. Liferay Portal 7.0.4 Liferay Portal 7.0.4

Severity 2 User's email address, screen name or user id (depending on the authentication method) is exposed in URL. Liferay Portal 7.0.4 Liferay Portal 7.0.4

Liferay Portal 7.0.4 Liferay Portal 7.0.4 Multiple permission issue allows users to perform actions on resources which they are not authorized to perform. Severity 2

Severity 2 Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML into a page. Liferay Portal 7.0.4 Liferay Portal 7.0.4

7.0.3-ce-ga4-security-1.0 patch (source) In Liferay Portal 7.0 CE GA4, the path to all OSGi bundles is exposed via crafted URL. Severity 1

In Liferay Portal 7.0 CE GA3, Velocity and FreeMarker templates does not properly restrict the use of some variables, which allow any user with permission to create a template to insert arbitrary...

In Liferay Portal 7.0 CE GA4, multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML into a page. Severity 2 7.0.3-ce-ga4-security-1.0...

7.0.3-ce-ga4-security-1.0 patch (source) March 2020 source patch for Liferay Portal 6.2.5. Details for working with source patches can be found on the Patching Liferay Portal page. In Liferay...

In Liferay Portal 7.0 CE GA4, AggregateFilter, MinifierFilter and DynamicCSSFilter allows unauthenticated users to cause a denial of service (disk consumption) via crafted URL. Severity 1...

Severity 2 When JAAS is enabled, ThreadLocal may leak variables to other processes. Liferay Portal 7.0.3 Liferay Portal 7.0.3

Severity 2 Passwords are visible to administrators in the Server Administration section of the Control Panel. Liferay Portal 7.0.3 Liferay Portal 7.0.3

System settings (including credentials/passwords) may be exposed when performing a data migration. The information exposure is limited to the administrator user who executed the data migration....

Liferay Portal 7.0.3 Liferay Portal 7.0.3 Some vulnerabilities reported by Spyridon Chatzimichail Severity 2 Multiple permission issue allows users to perform actions on resources which they are...

The password history checking functionality in a password policy can be circumvented via forget password. Severity 2 Liferay Portal 7.0.3 Liferay Portal 7.0.3

Severity 2 Open redirect vulnerability in Search application allows remote attackers to redirect users to arbitrary web sites. Liferay Portal 7.0.3 Liferay Portal 7.0.3

Liferay Portal 7.0.3 March 2020 source patch for Liferay Portal 6.2.5. Details for working with source patches can be found on the Patching Liferay Portal page. Liferay Portal 7.0.3 Apache Commons...

Severity 1 Apache Tika is vulnerable to XML External Entity (XXE) processing attacks. This vulnerability can allow an attacker to access files on the file system and/or take down the portal (denial...

Unsanitized data in SessionClicks allows an attacker to cause a denial-of-service (DoS) via crafted URLs. The denial-of-service is limited to users who have clicked on the crafted URL and may...

Liferay Portal 7.0.3 Liferay Portal 7.0.3 Some vulnerabilities reported by Craig Young and Juho Nurminen Severity 2 Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to...

This issue was reported by Jacob Baines Severity 1 TunnelServlet allows remote code execution by unauthenticated users. Liferay Portal 7.0.3 Liferay Portal 7.0.3

If the log level is set to DEBUG, LDAP credentials are exposed in the logs. Severity 2 Liferay Portal 7.0.2 Liferay Portal 7.0.2

Severity 1 In Liferay Portal 7.0.1 and earlier, PDFBox does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a...

Severity 2 Liferay Portal 7.0.2 Liferay Portal 7.0.2 Editing a blog entry may reset the blog entry's permission to the default permission. This may allow a user without the necessary permission to...

Liferay Portal 7.0.2 The search result in the Search portlet may include search results which a user does not have permission to view. Severity 2 Liferay Portal 7.0.2

This issue was reported by Galina Kovbasenko Severity 2 The portal is vulnerable to open redirects for certain types of URLs. An attacker can potentially exploit this security vulnerability to...

Severity 2 This ticket covers various inline JavaScript related cross-site scripting (XSS) vulnerability. An attacker can potentially exploit this security vulnerability to insert malicious...

A reflected cross-site scripting (XSS) vulnerability exist in the <aui:form> tag. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a page....

Severity 2 A reflected cross-site scripting (XSS) vulnerability exist in the <aui:form> tag. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a...

Severity 2 A stored cross-site scripting (XSS) vulnerability exist in Monitoring. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a page. Liferay...

By default, Liferay Portal gives every registered user the Power User role. When a signed in user has the Power User role, the user will have their own site and permissions to manage the site...

Liferay Portal 7.0.1 Liferay Portal 7.0.1 Severity 2 Cross-Site Request Forgery (CSRF) tokens are persisted in the database and may make it easier for an attacker to launch a CSRF attack.

An open redirect vulnerability exists with Facebook authentication. An attacker can potentially exploit this security vulnerability to redirect users to a different site. Severity 2 Liferay Portal...

Severity 2 By constructing the correct URL, some restricted Web Application Bundle (WAB) resources may be accessible. Liferay Portal 7.0.1 Liferay Portal 7.0.1

Liferay Portal 7.0.1 Liferay Portal 7.0.1 Severity 1 This ticket covers various permission issues in Liferay Portal 7.0 CE GA1 that may result in a user having permission the user should not have.

This ticket covers various cross-site scripting (XSS) issues in Liferay Portal 7.0 CE GA1 Severity 2 Liferay Portal 7.0.1 Liferay Portal 7.0.1