VYPR
← All advisories
Low severity2.7NVD Advisory· Published May 24, 2023· Updated Jun 17, 2026

CVE-2023-33947

CVE-2023-33947

Description

The Object module in Liferay Portal 7.4.3.4 through 7.4.3.60, and Liferay DXP 7.4 before update 61 does not segment object definition by virtual instance in search which allows remote authenticated users in one virtual instance to view object definition from a second virtual instance by searching for the object definition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
com.liferay.portal:release.portal.bomMaven
>= 7.4.3.4, < 7.4.3.617.4.3.61

Affected products

65
  • osv-coords2 versions
    pkg:bitnami/liferaypkg:maven/com.liferay.portal/release.portal.bom
    >= 7.4.0, <= 7.4.0+ 1 more
    • (no CPE)range: >= 7.4.0, <= 7.4.0
    • (no CPE)range: >= 7.4.3.4, < 7.4.3.61
  • Liferay/Portalv52 versions
    7.4.3.4+ 1 more
    • (no CPE)range: 7.4.3.4
    • cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*range: >=7.4.3.4,<=7.4.3.60
  • Liferay/Digital Experience Platform60 versions
    cpe:2.3:a:liferay:digital_experience_platform:7.4:update1:*:*:*:*:*:*+ 59 more
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update1:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update10:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update11:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update12:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update13:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update14:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update15:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update16:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update17:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update18:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update19:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update2:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update20:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update21:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update22:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update23:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update24:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update25:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update26:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update27:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update28:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update29:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update3:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update30:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update31:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update32:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update33:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update34:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update35:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update36:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update37:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update38:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update39:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update4:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update40:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update41:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update42:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update43:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update44:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update45:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update46:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update47:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update48:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update49:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update5:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update50:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update51:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update52:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update53:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update54:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update55:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update56:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update57:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update58:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update59:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update6:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update60:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update7:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update8:*:*:*:*:*:*
    • cpe:2.3:a:liferay:digital_experience_platform:7.4:update9:*:*:*:*:*:*
  • Liferay/DXPcpe-rescue
    Range: 7.4.13

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.