Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
7.1 DXP (7.1.10), 7.2 DXP (7.2.10)
-
5.5
-
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
-
19
-
6
Description
Dynamic Data Lists in Liferay DXP 7.1 and 7.2 is bundled with Apache POI 3.15 which has known vulnerabilities. Fore more details, please see https://www.cvedetails.com/version-list/45/22766/1/Apache-POI.html