CVE-2021-33321

HIGH · CVSS 7.5 EPSS 1.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-08-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-33321

Severity

HIGH

CVSS

7.5

EPSS

1.42%

Original NVD Description

Insecure default configuration in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via the forgot password functionality. The portal.property login.secure.forgot.password should be defaulted to true.