Search Results

All Results 57
ソート
Resource Type
Applicable Versions
Deployment Approach
Capability
Feature
Accessibility: Success Criterion 4.1.1 Parsing (WCAG 2.1)
Issue The tool https://validator.w3.org shows accessibility issues related to success criterion 4.1.1 Parsing. Environment 2024.q1 Resolution Since WCAG 2.2, success criterion 4.1.1 Parsing is considered...
Service Organization Control (SOC) -1 Type 2 report
Issue Service Organization Control (SOC) -1 Type 2 report for auditing purposes. Environment Liferay DXP Resolution The SOC-1 report focuses on financial controls and their evaluation and this reporting is not...
A blank SAML redirect screen is seen even with redirect message disabled
Issue A blank intermediary page (showing "Please select your identity provider" title and /portal/c/portal/login?redirect=%2Fportal%2F&refererPlid=[sanitized]&p_l_id=[sanitized] URL) is being seen even with the hotfix...
Files uploaded with Guest view permission - Forms Upload field
Issue When a document is added in the Form Upload field it will have 'Guest view' permission. When a document is added directly in the Document and Media library it will NOT have 'Guest view' permission. Is there a...
Security Issue: CVE-2024-28752 - Apache CXF
Issue Security vulnerability CVE-2024-28752 details a SSRF vulnerability with the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3, and 3.5.8, which would allow an attacker to perform SSRF style attacks...
What does the TempFileEntriesMessageListener actually do?
Issue In our logs we see some errors apparently related to an hourly job, TempFileEntriesMessageListener the triggering interval of this job seems to be set in System Settings/ Documents and Media/Service/Temporary File...
The sitemap.xml rendering is not showing tree view when xml.sitemap.index.enabled is set to false
Issue The sitemap.xml rendering is not showing tree view after setting xml.sitemap.index.enabled=false Environment Liferay DXP 7.4, Quarterly Release Resolution This is expected behavior. The XML file that is generated is...
Do Units Of Measure need to be configured individually for each SKU?
Issue Units Of Measure (UOM) need to be created and configured for each SKU. Can we create UOM centrally and then only select it (reuse it) for SKUs?   Environment Commerce   Resolution UOM needs to be defined...
Critical Remote Code Execution Backdoor Vulnerability
Issue A critical remote code Backdoor vulnerability was discovered on the open source XZ utils. This is CVE-2024-3094 with a maximum CVSS3 score of 10.0 Environment Liferay DXP 7.4 Resolution The Docker images,...
Clock icon does not appear during Web Content scheduling with Firefox browser
Issue Firefox browser does not show the Clock icon on Web Content Schedule Dates. Environment Liferay DXP 7.4 Resolution The way browsers handle input for Time fields is not specific to Liferay. It is related to...
Is there a configuration that controls the retention of comments?
Issue Let's suppose, a user can create a page with a comments area. Other users may leave comments. How long has the comment been left? How many comments can be stored per page? Can those values be managed, or does...
Special char "~" in the URL
Issue Special char "~" in the URL: /group/user-view/~/control_panel/manage/-/site/settings? Environment Liferay DXP [all versions] Resolution Liferay has confirmed that the URL's special char "~" is part of the URL...
Cipher Keys used in DXP 7.1 and 7.3
Issue Our security team would like to know whether Liferay DXP 7.1 and DXP 7.3 uses any of the following cipher keys? DES, 3DES, IDEA or RC2 Environment Liferay DXP 7.1 Liferay DXP 7.3 Resolution The algorithms...
Guest can't update (call put method) in object headless API
Issue When trying to update a specific object through Headless API calls with a guest user (using an angular app), the following error is displayed: {     "status": "FORBIDDEN",     "title": "User 20099 must have...
user_ .modifiedDate table changes upon User Login
Issue When a user logs in, Liferay is changing the user_ .modifiedDate value in the database table.    Environment Liferay 7.4   Resolution The behavior where user_ .modifiedDate field is modified upon User Login has...
liferay-module-config-generator as a dependency
Issue As a developer, should I add liferay-module-config-generator in the block dependencies or in the block devDependencies? Environment Liferay DXP 7.1 Resolution This module is thought to be used in the block...
Database Permissions Required for Liferay
Issue Could you please provide us with a list of Database Permissions required for Liferay to function? (We are optimizing our application security concerning the Database) Environment Liferay DXP 7.1...
Unable to process OpenID Connect authentication response: Requested value and approved state do not match
Issue From time to time, error messages like the following appear in logs: 2024-02-14 13:31:55.099 ERROR [http-nio-8080-exec-120][OpenIdConnectFilter:132] Unable to process OpenID Connect authentication response:...
What Does The Dash Symbol '-' Mean In The Help Center Module Version Changes Section?
Issue We are reviewing module changes on help center and in the last column which shows the version destination there is a dash symbol '-'. Does this indicate deprecation?  Environment DXP 7.4 Resolution The dash...
Licensing Issues with iText PDF Library
Issue We need to understand that "Does the iText license come bundled with the Liferay License or needs to be procured separately?". Environment Liferay DXP  7.2 Resolution There is no license included for...