{"id":"CVE-2021-33320","details":"The Flags module in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 5, does not limit the rate at which content can be flagged as inappropriate, which allows remote authenticated users to spam the site administrator with emails","aliases":["GHSA-wg4x-hf94-fj5v"],"modified":"2026-05-15T12:04:10.378217052Z","published":"2021-08-03T19:15:08.557Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:liferay:digital_experience_platform:7.0:-:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_13:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_14:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_24:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_25:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_26:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_27:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_28:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_30:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_33:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_35:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_36:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_39:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_3:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_40:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_41:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_42:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_43:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_44:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_45:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_46:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_47:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_48:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_49:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_50:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_51:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_52:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_53:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_54:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_56:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_57:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_58:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_59:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_60:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_61:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_64:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_65:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_66:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_67:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_68:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_69:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_70:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_71:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_72:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_73:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_75:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_76:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_78:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_79:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_80:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_81:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_82:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_83:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_84:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_85:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_86:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_87:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_88:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_89:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_90:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_91:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_92:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_93:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_94:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.0:fix_pack_95:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:-:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_10:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_11:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_12:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_13:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_14:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_15:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_16:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_17:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_18:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_19:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_1:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_2:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_3:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_4:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_5:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_6:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_7:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_8:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_9:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.2:-:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_1:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_2:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_3:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_4:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"7.0-NA"},{"last_affected":"7.0-fix_pack_13"},{"last_affected":"7.0-fix_pack_14"},{"last_affected":"7.0-fix_pack_24"},{"last_affected":"7.0-fix_pack_25"},{"last_affected":"7.0-fix_pack_26"},{"last_affected":"7.0-fix_pack_27"},{"last_affected":"7.0-fix_pack_28"},{"last_affected":"7.0-fix_pack_3"},{"last_affected":"7.0-fix_pack_30"},{"last_affected":"7.0-fix_pack_33"},{"last_affected":"7.0-fix_pack_35"},{"last_affected":"7.0-fix_pack_36"},{"last_affected":"7.0-fix_pack_39"},{"last_affected":"7.0-fix_pack_40"},{"last_affected":"7.0-fix_pack_41"},{"last_affected":"7.0-fix_pack_42"},{"last_affected":"7.0-fix_pack_43"},{"last_affected":"7.0-fix_pack_44"},{"last_affected":"7.0-fix_pack_45"},{"last_affected":"7.0-fix_pack_46"},{"last_affected":"7.0-fix_pack_47"},{"last_affected":"7.0-fix_pack_48"},{"last_affected":"7.0-fix_pack_49"},{"last_affected":"7.0-fix_pack_50"},{"last_affected":"7.0-fix_pack_51"},{"last_affected":"7.0-fix_pack_52"},{"last_affected":"7.0-fix_pack_53"},{"last_affected":"7.0-fix_pack_54"},{"last_affected":"7.0-fix_pack_56"},{"last_affected":"7.0-fix_pack_57"},{"last_affected":"7.0-fix_pack_58"},{"last_affected":"7.0-fix_pack_59"},{"last_affected":"7.0-fix_pack_60"},{"last_affected":"7.0-fix_pack_61"},{"last_affected":"7.0-fix_pack_64"},{"last_affected":"7.0-fix_pack_65"},{"last_affected":"7.0-fix_pack_66"},{"last_affected":"7.0-fix_pack_67"},{"last_affected":"7.0-fix_pack_68"},{"last_affected":"7.0-fix_pack_69"},{"last_affected":"7.0-fix_pack_70"},{"last_affected":"7.0-fix_pack_71"},{"last_affected":"7.0-fix_pack_72"},{"last_affected":"7.0-fix_pack_73"},{"last_affected":"7.0-fix_pack_75"},{"last_affected":"7.0-fix_pack_76"},{"last_affected":"7.0-fix_pack_78"},{"last_affected":"7.0-fix_pack_79"},{"last_affected":"7.0-fix_pack_80"},{"last_affected":"7.0-fix_pack_81"},{"last_affected":"7.0-fix_pack_82"},{"last_affected":"7.0-fix_pack_83"},{"last_affected":"7.0-fix_pack_84"},{"last_affected":"7.0-fix_pack_85"},{"last_affected":"7.0-fix_pack_86"},{"last_affected":"7.0-fix_pack_87"},{"last_affected":"7.0-fix_pack_88"},{"last_affected":"7.0-fix_pack_89"},{"last_affected":"7.0-fix_pack_90"},{"last_affected":"7.0-fix_pack_91"},{"last_affected":"7.0-fix_pack_92"},{"last_affected":"7.0-fix_pack_93"},{"last_affected":"7.0-fix_pack_94"},{"last_affected":"7.0-fix_pack_95"},{"last_affected":"7.1-NA"},{"last_affected":"7.1-fix_pack_1"},{"last_affected":"7.1-fix_pack_10"},{"last_affected":"7.1-fix_pack_11"},{"last_affected":"7.1-fix_pack_12"},{"last_affected":"7.1-fix_pack_13"},{"last_affected":"7.1-fix_pack_14"},{"last_affected":"7.1-fix_pack_15"},{"last_affected":"7.1-fix_pack_16"},{"last_affected":"7.1-fix_pack_17"},{"last_affected":"7.1-fix_pack_18"},{"last_affected":"7.1-fix_pack_19"},{"last_affected":"7.1-fix_pack_2"},{"last_affected":"7.1-fix_pack_3"},{"last_affected":"7.1-fix_pack_4"},{"last_affected":"7.1-fix_pack_5"},{"last_affected":"7.1-fix_pack_6"},{"last_affected":"7.1-fix_pack_7"},{"last_affected":"7.1-fix_pack_8"},{"last_affected":"7.1-fix_pack_9"},{"last_affected":"7.2-NA"},{"last_affected":"7.2-fix_pack_1"},{"last_affected":"7.2-fix_pack_2"},{"last_affected":"7.2-fix_pack_3"},{"last_affected":"7.2-fix_pack_4"}],"source":"CPE_FIELD","vendor_product":"liferay:digital_experience_platform"}]},"references":[{"type":"FIX","url":"https://issues.liferay.com/browse/LPE-17007"},{"type":"FIX","url":"https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747590"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}]}