Cross-site scripting (XSS) vulnerability in the Asset module's edit vocabulary page in Liferay Portal 7.0.0 through 7.3.4, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the (1) comliferayjournalwebportletJournalPortletname or (2) comliferaydocumentlibrarywebportletDLAdminPortlet_name parameter.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_3"
},
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_1"
},
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_2"
},
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_3"
},
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_1"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_25"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_26"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_27"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_28"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_30"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_33"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_35"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_36"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_39"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_40"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_41"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_42"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_43"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_44"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_45"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_46"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_47"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_48"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_49"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_50"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_51"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_52"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_53"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_54"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_56"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_57"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_58"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_59"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_60"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_61"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_64"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_65"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_66"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_67"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_68"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_69"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_70"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_71"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_72"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_73"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_75"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_76"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_78"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_79"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_80"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_81"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_82"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_83"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_84"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_85"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_86"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_87"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_88"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_89"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_90"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_91"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_92"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_93"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_94"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_95"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_11"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_16"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_17"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_18"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_19"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_9"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_8"
}
]
},
{
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.3.5"
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-33328.json"