CVE-2021-33323

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.1.0 through 7.3.2 Liferay DXP versions 7.1 before fix pack 19 Liferay DXP versions 7.2 before fix pack 7

Description The Dynamic Data Mapping module autosaves form values for unauthenticated users, allowing remote attackers to view these autosaved values by accessing the form as an unauthenticated user.

Recommendations For Liferay Portal versions 7.1.0 through 7.3.2, update to a version that includes the necessary security fixes. For Liferay DXP version 7.1, apply fix pack 19 or later. For Liferay DXP version 7.2, apply fix pack 7 or later. As a temporary workaround, consider disabling the Dynamic Data Mapping module until a patch is available.