Package · Maven

com.liferay:com.liferay.portal.security.ldap.impl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2021-38266

Liferay Portal and Liferay DXP fails to properly import users from LDAP

The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from…

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.portal.security.ldap.impl Maven

Mar 2, 2022