Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

LSV-1103: User permissions are not checked for DepotGroupItemSelectorProvider

Affects versions

None

Fix versions

None

7.0 Fix Pack Version

None

7.1 Fix Pack Version

None

7.2 Fix Pack Version

None

7.3 Fix Pack Version

8

7.4 Fix Pack Version

29

CVE IDs

CVSS Base Score

CVSS Vector String

Labels

Description

The Asset Libraries module in Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.

Activity

Show:
Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Priority

Zendesk Support

Created June 28, 2022 at 5:31 AM
Updated October 18, 2022 at 11:18 PM
Resolved October 18, 2022 at 11:18 PM