// For flags

CVE-2021-33331

 

Severity Score

6.1
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Open redirect vulnerability in the Notifications module in Liferay Portal 7.0.0 through 7.3.1, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19 and 7.2 before fix pack 8, allows remote attackers to redirect users to arbitrary external URLs via the 'redirect' parameter.

Una vulnerabilidad de redireccionamiento abierto en el módulo Notifications de Liferay Portal versiones 7.0.0 hasta 7.3.1, y Liferay DXP versiones 7.0 anteriores a fix pack 94, versiones 7.1 anteriores a fix pack 19 y versiones 7.2 anteriores a fix pack 8, permite a atacantes remotos redirigir a usuarios a URLs externas arbitrario por medio del parámetro "redirect"

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-05-20 CVE Reserved
  • 2021-08-03 CVE Published
  • 2024-08-03 CVE Updated
  • 2024-08-06 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
-
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_13
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_14
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_24
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_25
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_26
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_27
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_28
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_3\+
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_30
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_33
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_35
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_36
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_39
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_40
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_41
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_42
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_43
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_44
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_45
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_46
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_47
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_48
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_49
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_50
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_51
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_52
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_53
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_54
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_56
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_57
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_58
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_59
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_60
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_61
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_64
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_65
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_66
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_67
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_68
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_69
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_70
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_71
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_72
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_73
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_75
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_76
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_78
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_79
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_80
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_81
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_82
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_83
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_84
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_85
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_86
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_87
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_88
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_89
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_90
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_91
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_92
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.0
Search vendor "Liferay" for product "Dxp" and version "7.0"
fix_pack_93
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
-
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_1
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_10
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_11
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_12
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_13
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_14
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_15
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_16
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_17
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_18
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_2
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_3
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_4
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_5
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_6
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_7
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_8
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.1
Search vendor "Liferay" for product "Dxp" and version "7.1"
fix_pack_9
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
-
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_1
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_2
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_3
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_4
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_5
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_6
Affected
Liferay
Search vendor "Liferay"
Dxp
Search vendor "Liferay" for product "Dxp"
7.2
Search vendor "Liferay" for product "Dxp" and version "7.2"
fix_pack_7
Affected
Liferay
Search vendor "Liferay"
Liferay Portal
Search vendor "Liferay" for product "Liferay Portal"
>= 7.0.0 < 7.3.2
Search vendor "Liferay" for product "Liferay Portal" and version " >= 7.0.0 < 7.3.2"
-
Affected