com.liferay:com.liferay.dynamic.data.mapping.form.web

3 results · Feed

• Medium 5.3
  CVE-2025-43762

  Liferay Portal users can upload an unlimited amount of files

  Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an un…

  Liferay DXP Portal com.liferay:com.liferay.dynamic.data.mapping.form.field.type Maven
  Aug 22, 2025
• Medium 5.1
  CVE-2025-43750

  Liferay Portal Unvalidated File Upload

  Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows remote unauthenticat…

  Liferay DXP Portal com.liferay:com.liferay.dynamic.data.mapping.form.web Maven
  Aug 20, 2025
• High 7.5
  CVE-2021-33323

  Liferay Portal and Liferay DXP autosaves form data for other users to see

  The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing th…

  com.liferay.portal:release.dxp.bom com.liferay:com.liferay.dynamic.data.mapping.form.web Maven
  Aug 3, 2021