CST-7148 Security vulnerability in Apache Commons BeanUtils 1.9.2

Description

Liferay Portal 7.1.3 and possibly earlier unsupported versions, is bundled with with Apache Commons BeanUtils 1.9.2 which contains known vulnerabilities.

Severity

Severity 2

Fixed Version(s)

Publication date: Thu, 05 Mar 2020 07:35:00 +0000

Security advisories for Liferay's enterprise offerings (e.g., Liferay DXP) are only listed here since 2023. Historial advisories are availabe in the Help Center.