CVE-2023-33948 Information
May 25, 2023
cve
Description
The Dynamic Data Mapping module in Liferay Portal 7.4.3.67 and Liferay DXP 7.4 update 67 does not limit Document and Media files which can be downloaded from a Form which allows remote attackers to download any file from Document and Media via a crafted URL.