Critical severity9.8NVD Advisory· Published Apr 16, 2023· Updated Jun 17, 2026
CVE-2021-33990
CVE-2021-33990
Description
Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the exploit reference link only shows frmfolders.html is accessible and does not demonstrate how an unauthorized user can upload a file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 6.2.5
Patches
Vulnerability mechanics
References
1- packetstormsecurity.com/files/171701/Liferay-Portal-6.2.5-Insecure-Permissions.htmlnvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.