https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:47:16.354105+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-62967 cnvd-2021-62967 2026-10-16T15:47:16.454941+00:00 cnvd-2021-62967 https://cve.radiocsirt.org/vuln/euvd-2026-28343 EUVD-2026-28343 2026-10-16T15:47:16.454981+00:00 EUVD-2026-28343 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33323 fkie_cve-2021-33323 2026-10-16T15:47:16.454996+00:00

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user.

 https://cve.radiocsirt.org/vuln/ghsa-fxpf-jr2q-vpvv GHSA-fxpf-jr2q-vpvv — Liferay Portal and Liferay DXP autosaves form data for other users to see 2026-10-16T15:47:16.455027+00:00

Affected: Maven: com.liferay:com.liferay.dynamic.data.mapping.form.web, Maven: com.liferay.portal:release.dxp.bom

The Dynamic Data Mapping module in Dynamic Data Mapping Form Web before 3.0.23 in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user.

 https://cve.radiocsirt.org/vuln/gsd-2021-33323 gsd-2021-33323 2026-10-16T15:47:16.455055+00:00 gsd-2021-33323