Search Results

Issue Service Organization Control (SOC) -1 Type 2 report for auditing purposes. Environment Liferay DXP Resolution The SOC-1 report focuses on financial controls and their evaluation and this reporting is not applicable in the Liferay context. Therefore, Liferay does not make this type...

Issue Liferay displays Time format differently on the site's time picker than on the OS. Environment DXP 7.4 + Resolution This behavior is due to the changes of LPS-169277 where the old time picker has been replaced by a native time. Because of this the time picker will display the time...

Issue User wishes to know which MySQL version is supported in Liferay Cloud.   Environment Liferay Cloud Resolution Currently MySQL 5.7 is supported in Liferay Cloud. Additional Information MySQL  , content:...

Issue Liferay's OpenID Connect implementation does not account for language variations for ui_locales. For example, Selecting English (United States) on Liferay sets ui_locales to en. Selecting Chinese (either Traditional or Simplified) sets ui_locales to zh. In this example, we would...

Issue 1. When the below content is pasted in the source of Web Content, then the onclick event gets removed from the source automatically. Below is the original content: <div class="Small-ButtonRSecond"><button class="Rbtn" onClick="">Read&nbsp;More<i class="bi...

Issue A blank intermediary page (showing "Please select your identity provider" title and /portal/c/portal/login?redirect=%2Fportal%2F&refererPlid=[sanitized]&p_l_id=[sanitized] URL) is being seen even with the hotfix installed (with fix LPS-172619) and the...

Issue When a document is added in the Form Upload field it will have 'Guest view' permission. When a document is added directly in the Document and Media library it will NOT have 'Guest view' permission. Is there a configuration option where we can always disable 'Guest view' permission...

Issue Security vulnerability CVE-2024-28752 details a SSRF vulnerability with the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3, and 3.5.8, which would allow an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of...

Issue Within a site with only private pages, a user who is not member of the site but has permission to access and view a private page via some regular role cannot access that private page. Environment Quarterly Releases: 2023.Q3, 2023.Q4, 2024.Q1 Liferay DXP 7.0, 7.1, 7.2, 7.3, 7.4...

Issue Is there any other source of information where we could get additional search history information from Liferay or directly from Elasticsearch? How can we provide customers with metrics, beyond the top 5 search terms? Environment Liferay DXP Resolution With a Platinum License...

Issue In our logs we see some errors apparently related to an hourly job, TempFileEntriesMessageListener the triggering interval of this job seems to be set in System Settings/ Documents and Media/Service/Temporary File Entries Check Interval, and it is set to 1 hour by default, but I am...

Issue The sitemap.xml rendering is not showing tree view after setting xml.sitemap.index.enabled=false Environment Liferay DXP 7.4, Quarterly Release Resolution This is expected behavior. The XML file that is generated is rendering the file as an XHTML file (see the presence of...

Issue Units Of Measure (UOM) need to be created and configured for each SKU. Can we create UOM centrally and then only select it (reuse it) for SKUs?   Environment Commerce   Resolution UOM needs to be defined individually for each SKU. The reason for this is that they are SKU's specific...

Issue A critical remote code Backdoor vulnerability was discovered on the open source XZ utils. This is CVE-2024-3094 with a maximum CVSS3 score of 10.0 Environment Liferay DXP 7.4 Resolution The Docker images, or DXP, are not vulnerable. Our Docker images use Ubuntu Jammy, and in the...

Issue Firefox browser does not show the Clock icon on Web Content Schedule Dates. Environment Liferay DXP 7.4 Resolution The way browsers handle input for Time fields is not specific to Liferay. It is related to the way browsers themselves manage Time field input. Attached is a simple...

Issue Let's suppose, a user can create a page with a comments area. Other users may leave comments. How long has the comment been left? How many comments can be stored per page? Can those values be managed, or does Liferay DXP record all comments made on a page without deleting them on a...

Issue Special char "~" in the URL: /group/user-view/~/control_panel/manage/-/site/settings? Environment Liferay DXP [all versions] Resolution Liferay has confirmed that the URL's special char "~" is part of the URL design pattern instead of a security risk. Additional Information...

Issue Our security team would like to know whether Liferay DXP 7.1 and DXP 7.3 uses any of the following cipher keys? DES, 3DES, IDEA or RC2 Environment Liferay DXP 7.1 Liferay DXP 7.3 Resolution The algorithms listed above are not being used in Liferay DXP 7.1 and 7.3 by default. You...

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue I am using the MySQL client to access the database: Using the MySQL Client The shell access is not user friendly and makes it hard to...

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue How do cookies travel within regions? Environment Liferay SaaS Liferay PaaS Resolution The routing of cookies depends on the location...

Issue How can I mitigate vulnerability with CVE-2023-49070 regarding Liferay DXP? Environment All environments. Resolution Liferay does not use the Apache OFBiz, so Liferay is not impacted by this vulnerability. Additional Information CVE-2023-49070, content:...

Issue When making a selection from a web content display widget, clicking the “Sites and Libraries” breadcrumb link only displays the current site. Here are the steps to reproduce: Start a 2023.Q4.4 instance. Add a new site called “test-site“. Navigate back to the default “Liferay DXP”...

Issue I need to locate pages that specify an outdated attribute in their custom look and feel. I haven't found what database column indicates that a page is customized. Can you please point out the column to identify such pages?   Environment DXP 7.4+ Resolution Settings defined...

Issue You have a Liferay server and several virtual instances, and want to know if it’s possible to configure resources for each virtual instance. Environment DXP 7.2+ Resolution Unfortunately handling resources for each instance is not possible, in terms of memory, disk space and JVM...

Issue After sorting by the field name in ascending alphanumeric order, the results are currently sorted lexicographically. Environment Liferay DXP 7.4 Liferay Quarterly Release  Resolution This is the expected behavior. By default, Liferay sorts text fields lexicographically. To achieve...

Issue if there is no private page on a site, and we create a message boards thread with "Viewable By"="Site Members", and you insert an image in the message (with the editor's image icon), that image will in the Documents and Media will end up having view permission for Guest (although...

Issue Is it safe to limit the database permissions in any way? Can it be customized to use the minimum amount of Database Privilege and still be functional?  Environment DXP 7.0+ Quarterly Release Resolution Liferay's Database Privileges shouldn't be customized or minimalized in any way....

Issue The class BaseUpgradeServiceModuleRelease was previously available in 7.3 and below and is used as a start/stop method to override and be used as a service tracker.  Environment DXP 7.4+ Resolution This class is no longer available in 7.4. The...

Issue Make prefix URLs configurable - LPD-6813 We are waiting for this for a while. In which Quarterly it is going to be included?   Resolution LPD-6813 is a story ticket and is part of the feature request LPD-640, which is under review. At this point, we do not have the information on...

Issue If we move documents between folders their Modification date is updated even if the document itself has not been modified. Environment Liferay 7.3+ Resolution The actual behavior is expected and a limitation of the product. Additional Information Journal Article modified date...

Issue We are exporting site contents in a lar file. When checking the number of items in the export, we've seen some values. When we try to import this lar in another site, we are detecting that the number of items are not the same as the values presented in the export process....

Issue When trying to update a specific object through Headless API calls with a guest user (using an angular app), the following error is displayed: {     "status": "FORBIDDEN",     "title": "User 20099 must have UPDATE permission for com.liferay.object.model.ObjectDefinition#64782...

Issue When a user logs in, Liferay is changing the user_ .modifiedDate value in the database table.    Environment Liferay 7.4   Resolution The behavior where user_ .modifiedDate field is modified upon User Login has been determined to be Intended Behavior. This includes when a user's...

Issue As a developer, should I add liferay-module-config-generator in the block dependencies or in the block devDependencies? Environment Liferay DXP 7.1 Resolution This module is thought to be used in the block devDependencies in order to be executed at build time. Additional...

Issue Could you please provide us with a list of Database Permissions required for Liferay to function? (We are optimizing our application security concerning the Database) Environment Liferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Resolution Liferay requires reading...

Issue From time to time, error messages like the following appear in logs: 2024-02-14 13:31:55.099 ERROR [http-nio-8080-exec-120][OpenIdConnectFilter:132] Unable to process OpenID Connect authentication response: Requested value "yIH9jiIpdpuACAYf7NdNERUksBJZvNOoi-knjn7BOo0" and approved...

Issue We are reviewing module changes on help center and in the last column which shows the version destination there is a dash symbol '-'. Does this indicate deprecation?  Environment DXP 7.4 Resolution The dash symbol '-' does not automatically mean something has been deprecated, just...

Issue We need to understand that "Does the iText license come bundled with the Liferay License or needs to be procured separately?". Environment Liferay DXP  7.2 Resolution There is no license included for 'iText' with the Liferay Activation Key. Additionally, the embedded iTextpdf...

Issue The Price Range Facet widget filters results based on a product's lowest price. However, the users have created the base price and price list separately for their products, so that their guest users can only view the basic price and specific accounts should see price list values...

Issue When performing a network scan on a Liferay PaaS environment, ports 80, 443, and others appear to be in open state. Will this allow HTTP requests to be successful? Environment Liferay PaaS Resolution This behavior is expected and does not represent a security threat. Liferay PaaS...