Liferay Portal Cleartext Storage of Sensitive Information Vulnerability - CVE-2021-33323 - Vulnerability Database

Liferay Portal Cleartext Storage of Sensitive Information Vulnerability - CVE-2021-33323

High

Reference: CVE-2021-33323

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-33323

Title: Liferay Portal Cleartext Storage of Sensitive Information Vulnerability

Overview:

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2 and Liferay DXP 7.1 before fix pack 19 and 7.2 before fix pack 7 autosaves form values for unauthenticated users which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user.