// For flags

CVE-2021-29049

 

Severity Score

6.1
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before fix pack 23, 7.2 before fix pack 12 and 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter.

Una vulnerabilidad de tipo Cross-site scripting (XSS) en la página de proceso de edición del módulo Portal Workflow en Liferay versiones 7.0 anteriores a fix pack 99, versiones 7.1 anteriores a fix pack 23, versiones 7.2 anteriores a fix pack 12 and versiones 7.3 anteriores a fix pack 1, permite a atacantes remotos inyectar scripts web o HTML arbitrarios por medio del parámetro currentURL

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-03-22 CVE Reserved
  • 2021-06-09 CVE Published
  • 2024-06-12 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
URL Tag Source
URL Date SRC
URL Date SRC
http://liferay.com 2021-06-16
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
-
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_13
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_14
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_24
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_25
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_26
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_27
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_28
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_3\+
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_30
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_33
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_35
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_36
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_39
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_40
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_41
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_42
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_43
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_44
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_45
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_46
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_47
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_48
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_49
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_50
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_51
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_52
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_53
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_54
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_56
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_57
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_58
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_59
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_60
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_61
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_64
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_65
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_66
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_67
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_68
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_69
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_70
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_71
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_72
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_73
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_75
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_76
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_78
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_79
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_80
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_81
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_82
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_83
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_84
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_85
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_86
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_87
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_88
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_89
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_90
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_91
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_92
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_93
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_94
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_95
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_96
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
sp2
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
sp5
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
-
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_1
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_10
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_11
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_12
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_13
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_14
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_15
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_16
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_17
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_18
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_19
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_2
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_20
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_21
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_22
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_3
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_4
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_5
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_6
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_7
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_8
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_9
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
-
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_1
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_10
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_11
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_2
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_3
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_4
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_5
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_6
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_7
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_8
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_9
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.3
Search vendor "Liferay" for product "Dxp" and version "7.3"
-
Affected