Search Results

Issue Vulnerability for Tomcat discovered after moving to Liferay DXP 7.4. How to remediate Apache Tomcat 9 Remote Code Execution (RCE) Via Write Enabled Default Servlet Vulnerability (CVE-2024-50379) and Denial of Service (DoS) via OutOfMemoryError (CVE-2024-56337). Environment Liferay...

Issue I would like to raise the log levels for ElasticSearch Sidecar The folder [liferay-home]/elasticsearch-sidecar/7.x.x/logs does not contain any log files Environment Quarterly Releases Resolution The ElasticSearch Sidecar is only intended for development and demonstration purposes....

Issue I encountered the following error when compiling my custom JSON Webservice Module with JDK 21.  exception    "Unsupported class file major version 65" throwable    "java.lang.IllegalArgumentException: Unsupported class file major version 65" Environment Liferay 2023.Q4.0 Resolution...

Issue Is Liferay vulnerable to the vulnerability described in CVE-2024-52046? Environment Liferay DXP 7.3 and above Resolution Liferay uses the affected Apache Mina library (`mina-core`) only in LDAP-related code. If LDAP is not enabled, Liferay is not vulnerable. Apache Mina is used for...

Issue When I am saving a form with a large amount of data, I get the following error:  Error: Please enter content with valid content size no larger than 1 MB. Environment Liferay Quarterly Releases Resolution Increase the threshold size with the following property: # Set the threshold...

Issue When attempting to renew the SSL certificate generated by Let’s Encrypt, the process fails with multiple 403 (Forbidden) errors. The error messages suggest a security restriction that is preventing the certificate from being recreated: Reason: Error accepting authorization: acme:...

Issue The following expired licensing error displays in Liferay PaaS logs: ERROR [main][LicenseManager:-1] Digital Enterprise Unlimited Enterprise-Wide license is expired Environment Liferay PaaS Resolution There are two workarounds that will work to resolve the issue: Delete the cached...

Issue After upgrading from Liferay 7.0 to a more recent Quarterly Release we are facing changes to the Audit_AuditEvent table, which was storing, in the clientIP column, the content of the 'X-FORWARDER-FOR' HTTP request header, which is meant to track the remote origin of the request....

Issue When using Freemarker variables userPermission and permissionChecker in a fragment to check if a user has specific permissions for their commerce account, the check always returns true, even for non-existent permissions. <#assign userPermission =...

Issue Where can I find the default display templates used by the Asset Publisher? Environment Quarterly Releases: 2024.Q3, 2024.Q2, 2024.Q1, 2023.Q4, 2023.Q3 Liferay DXP 7.4+ Resolution The templates are located in Liferay DXP's source code, available on GitHub. The relevant files can be...

Issue We are preparing the upgrade from a Liferay 7.3 FP2 to a Liferay 7.4 2024.Q1 and we are trying to prepare a rollback system if something goes wrong and we need go reinstall the 7.3. My question is about the document library. Does the upgrade touch the doclib files during the...

Issue When a page contains multiple Asset Publishers, the browser's back button may not work as expected. Clicking the back button may require multiple clicks to return to the previous page. Environment Liferay DXP 7.4 2024.Q2.0+ Resolution This is related to the implementation of...

Issue When using Adaptive Media with images in Product Catalog search results, the images are displayed correctly for some users, but not others. For example, Adaptive Media is not working for unauthenticated (guest) users but is rendering correctly for authenticated users. Environment...

Issue After translating existing web content, the last modified user displayed is the original author, not the translator. Environment Liferay DXP 7.4+ Resolution The "Modified by" user and timestamp for web content reflects modifications to the default language content. Translations do...

Issue Users with a role other than Administrator, for example, the "Editor" role, receive a permissions error when they try to access folders within Documents and Media while uploading a document to Web Content. The following error message is displayed in the logs:...

Issue When reviewing documentation such as https://help.liferay.com/hc/en-us/articles/360028820652-Configuring-RSS-Feeds the RSS Feed feature is listed as deprecated, and has been 7.1 but is still available in 7.4. 1. If this is deprecated, is there an end of life / remove from Liferay...

Issue Even after changing the time zone for the instance within the Instance Settings, the time zone for the Create Date for the logs in Audit are still displayed in UTC.   Environment Liferay DXP 7.4 Quarterly Release 2024.Q2   Resolution The Audit table, along with most other tables in...

Issue We do not find where is the feature to get objects localization. Based on following documentation https://learn.liferay.com/w/dxp/liferay-development/objects/creating-and-managing-objects/localizing-object-definitions-and-entries, this feature should be available since 2023.Q3...

Issue We tried to configure in our PAAS environnement the Elasticsearch X-Pack feature. When we follow this article and enable X-Pack feature in dev server (with environment variable), the ElasticSearch endpoint used for readiness and liveness are not accessible anymore and return 401...

Issue In previous versions, we were customizing the email notifications sent by Forms application following the instructions of these articles: How can I configure or customize the look and content of email notifications sent after a form entry has been submitted? Is the Email...