Total vulnerabilities in the database
The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers after it is used, which allows remote attackers to repeatedly perform actions protected by a CAPTCHA challenge by reusing the same CAPTCHA answer.
| Software | From | Fixed in |
|---|---|---|
| liferay / liferay_portal | 7.3.4 | 7.3.4.x |
| liferay / dxp | - | 7.3 |
| liferay / dxp | 7.3 | 7.3.x |
| liferay / liferay_portal | 7.3.5 | 7.3.5.x |