Threats tagged 'ghsa-6533-fhr2-f38h'

Liferay Portal and DXP versions prior to 5.0.52 and 69.1.0 respectively have an incorrect cache-control header in the Document Library and Adaptive Media modules. This misconfiguration allows local users to access downloaded files through the browser's cache, potentially exposing sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. A patch is available in versions 5.0.52 and 69.1.0.