The Object module in Liferay Portal 7.4.3.4 through 7.4.3.60, and Liferay DXP 7.4 before update 61 does not segment object definition by virtual instance in search which allows remote authenticated users in one virtual instance to view object definition from a second virtual instance by searching for the object definition.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Liferay
Published: 2023-05-24T15:34:37.132Z
Updated: 2024-08-02T15:54:13.639Z
Reserved: 2023-05-24T02:36:00.165Z
Link: CVE-2023-33947
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-05-24T16:15:09.927
Modified: 2023-06-01T17:02:26.453
Link: CVE-2023-33947
Redhat
No data.