Search Results

Issue Vulnerability for Tomcat discovered after moving to Liferay DXP 7.4. How to remediate Apache Tomcat 9 Remote Code Execution (RCE) Via Write Enabled Default Servlet Vulnerability (CVE-2024-50379) and Denial of Service (DoS) via OutOfMemoryError (CVE-2024-56337). Environment Liferay...

Issue I would like to raise the log levels for ElasticSearch Sidecar The folder [liferay-home]/elasticsearch-sidecar/7.x.x/logs does not contain any log files Environment Quarterly Releases Resolution The ElasticSearch Sidecar is only intended for development and demonstration purposes....

Issue I encountered the following error when compiling my custom JSON Webservice Module with JDK 21.  exception    "Unsupported class file major version 65" throwable    "java.lang.IllegalArgumentException: Unsupported class file major version 65" Environment Liferay 2023.Q4.0 Resolution...

Issue Is Liferay vulnerable to the vulnerability described in CVE-2024-52046? Environment Liferay DXP 7.3 and above Resolution Liferay uses the affected Apache Mina library (`mina-core`) only in LDAP-related code. If LDAP is not enabled, Liferay is not vulnerable. Apache Mina is used for...

Issue When I am saving a form with a large amount of data, I get the following error:  Error: Please enter content with valid content size no larger than 1 MB. Environment Liferay Quarterly Releases Resolution Increase the threshold size with the following property: # Set the threshold...

Issue When attempting to renew the SSL certificate generated by Let’s Encrypt, the process fails with multiple 403 (Forbidden) errors. The error messages suggest a security restriction that is preventing the certificate from being recreated: Reason: Error accepting authorization: acme:...

Issue The following expired licensing error displays in Liferay PaaS logs: ERROR [main][LicenseManager:-1] Digital Enterprise Unlimited Enterprise-Wide license is expired Environment Liferay PaaS Resolution There are two workarounds that will work to resolve the issue: Delete the cached...

Issue After upgrading from Liferay 7.0 to a more recent Quarterly Release we are facing changes to the Audit_AuditEvent table, which was storing, in the clientIP column, the content of the 'X-FORWARDER-FOR' HTTP request header, which is meant to track the remote origin of the request....