CVE-2021-33337
- Source
- https://cve.org/CVERecord?id=CVE-2021-33337
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33337.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-33337
- Aliases
- Published
- 2021-08-04T14:15:08.317Z
- Modified
- 2026-07-08T06:34:33.199406011Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Cross-site scripting (XSS) vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the comliferaydocumentlibrarywebportletDLAdminPortletname parameter.
- Database specific
{ "unresolved_ranges": [ { "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:liferay:digital_experience_platform:7.1:-:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_10:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_11:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_12:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_13:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_14:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_15:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_16:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_17:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_18:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_19:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_1:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_2:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_3:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_4:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_5:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_6:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_7:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_8:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_9:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:-:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_1:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_2:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_3:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_4:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_5:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_6:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_7:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_8:*:*:*:*:*:*" ], "vendor_product": "liferay:digital_experience_platform", "extracted_events": [ { "introduced": "7.1-NA" }, { "last_affected": "7.1-NA" }, { "introduced": "7.1-fix_pack_1" }, { "last_affected": "7.1-fix_pack_1" }, { "introduced": "7.1-fix_pack_10" }, { "last_affected": "7.1-fix_pack_10" }, { "introduced": "7.1-fix_pack_11" }, { "last_affected": "7.1-fix_pack_11" }, { "introduced": "7.1-fix_pack_12" }, { "last_affected": "7.1-fix_pack_12" }, { "introduced": "7.1-fix_pack_13" }, { "last_affected": "7.1-fix_pack_13" }, { "introduced": "7.1-fix_pack_14" }, { "last_affected": "7.1-fix_pack_14" }, { "introduced": "7.1-fix_pack_15" }, { "last_affected": "7.1-fix_pack_15" }, { "introduced": "7.1-fix_pack_16" }, { "last_affected": "7.1-fix_pack_16" }, { "introduced": "7.1-fix_pack_17" }, { "last_affected": "7.1-fix_pack_17" }, { "introduced": "7.1-fix_pack_18" }, { "last_affected": "7.1-fix_pack_18" }, { "introduced": "7.1-fix_pack_19" }, { "last_affected": "7.1-fix_pack_19" }, { "introduced": "7.1-fix_pack_2" }, { "last_affected": "7.1-fix_pack_2" }, { "introduced": "7.1-fix_pack_3" }, { "last_affected": "7.1-fix_pack_3" }, { "introduced": "7.1-fix_pack_4" }, { "last_affected": "7.1-fix_pack_4" }, { "introduced": "7.1-fix_pack_5" }, { "last_affected": "7.1-fix_pack_5" }, { "introduced": "7.1-fix_pack_6" }, { "last_affected": "7.1-fix_pack_6" }, { "introduced": "7.1-fix_pack_7" }, { "last_affected": "7.1-fix_pack_7" }, { "introduced": "7.1-fix_pack_8" }, { "last_affected": "7.1-fix_pack_8" }, { "introduced": "7.1-fix_pack_9" }, { "last_affected": "7.1-fix_pack_9" }, { "introduced": "7.2-NA" }, { "last_affected": "7.2-NA" }, { "introduced": "7.2-fix_pack_1" }, { "last_affected": "7.2-fix_pack_1" }, { "introduced": "7.2-fix_pack_2" }, { "last_affected": "7.2-fix_pack_2" }, { "introduced": "7.2-fix_pack_3" }, { "last_affected": "7.2-fix_pack_3" }, { "introduced": "7.2-fix_pack_4" }, { "last_affected": "7.2-fix_pack_4" }, { "introduced": "7.2-fix_pack_5" }, { "last_affected": "7.2-fix_pack_5" }, { "introduced": "7.2-fix_pack_6" }, { "last_affected": "7.2-fix_pack_6" }, { "introduced": "7.2-fix_pack_7" }, { "last_affected": "7.2-fix_pack_7" }, { "introduced": "7.2-fix_pack_8" }, { "last_affected": "7.2-fix_pack_8" } ] } ] }- References