CVE-2021-33331 | BDVDB-2026-158018 Detail

Description#

Open redirect vulnerability in the Notifications module in Liferay Portal 7.0.0 through 7.3.1, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19 and 7.2 before fix pack 8, allows remote attackers to redirect users to arbitrary external URLs via the 'redirect' parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747627
https://issues.liferay.com/browse/LPE-17022

Exploit#

No public exploit known

History#

Version 12021-08-03Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.