Search Results

Issue Security scan shows CVE-2016-1000027 as an active vulnerability, is Liferay affected? Environment DXP 7.4 Resolution CVE-2016-1000027 is known to us, and we can confirm that Liferay should not be vulnerable, as Liferay does not use the following components:...

Issue Customer reports images are gone after they published content It could be images or files from the Document Library   Environment Liferay DXP 7.2   Resolution If the publication took a lot of time it is very likely the cause of this behavior is the use of the option "Delete...

Issue If the title of a Content page has special characters on it, the title will then be displayed with "&". This usually happens when you place the character "&". For example: "Documents & Media", in this case the title would be displayed as Documents & Media. Environment DXP...

Issue Configure an Asset Publisher in a page using a display template different than the 'Full Content' one. Click on any asset: it shows its details, including the asset's title.  Environment Liferay DXP 7.4. Resolution If you want to hide the asset's title in its details view, please...

Issue In our Liferay 7.4 instance, editors encounter an error when attempting to publish an article without a Friendly URL, which differs from the behavior in Liferay 7.1. Environment Liferay DXP 7.4 Resolution The discrepancy between Liferay 7.1 and 7.4 is due to how they handle...

Issue Our security scan has shown CVE-2022-47966 as an active critical vulnerability. Is Liferay affected? Environment DXP 7.2 Resolution The out-of-the-box Liferay product is not affected by this vulnerability. So, unless you use this library in a custom implementation, your system can...

Issue When attempting to include the Vlibras script into the page, certain errors arise, causing the script to malfunction or causing buttons and links to stop working properly, for example.  Environment Liferay DXP Resolution This issue can be attributed to the incompatibility between...

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Failing to enable OIDC implementation on an instance within a Liferay SaaS environment. Environment Liferay SaaS Resolution This is a...

Issue After configuring the "Title SEO" of a page, Google and other search engines don't display the value as-is. If we use a customization to remove the Site and Instance names, they keep showing in search results pages. Environment Liferay DXP 7.0 - 7.4 Resolution The base theme...

Issue HTTP methods like HEAD, OPTIONS, TRACE may provide information about the application that can be used in attacks like XST, CSRF, steal of sensitive information. How we can disable insecure/unnecessary http methods? How to enable the SECURE attribute to disallow the cookie to be...

Issue You might encounter some deprecation warning in your Elasticsearch logs regarding the removal of mapping types: Using include_type_name in get mapping requests is deprecated. The parameter will be removed in the next major version. Environment Liferay DXP 7.1+ Elasticsearch 7.x+...

Issue When we change the site friendly URL, fragment images stop working and 404 errors were found in the browser console. Steps to Reproduce:  Set up Liferay DXP 7.4 Update 74. Navigate to Site Builder > Pages > Create a test page, e.g., "/test". Drag and drop a basic image fragment and...

Issue The user's time zone setting is not reflected in the display date of mapped content in the fragment. Environment Liferay DXP 7.4 Resolution This functionality does not exist yet in the Liferay Portal. There is a feature request open for this improvement: LPS-189638. Please follow...

Issue When rendering the image for my user, I noticed that the webp file of the page has a considerably increased size Is there something that can be done so that it doesn't happen? Environment Liferay DXP 7.4 Resolution First we need to understand that the .webp format is not supported...

Issue When I click on the expand button, the expanded area is not displayed, so I am not able to change the text (without editing the text in the source code). Environment Liferay DXP 7.3+ Resolution System settings > Third party > JQuery, tick enable and save the changes. Additional...

Issue I would like to understand the purpose of eventType column in Audit_AuditEvent and deliveryType in UserNotificationEvent tables. In deliveryType column what is the meaning of the values e.g. 10000,10002 etc. ? Environment Liferay DXP 7.0+ Resolution The eventType represents the...

Issue What permissions are necessary to be able to export or import a page? I get the error "I'm sorry, you don't have permission to access the requested resource" when trying to import or export a page. Environment DXP 7.3+ Resolution The user must have at least the following...

Issue For security reasons we need to update the jackson-databind library from version 2.13.2.2 to 2.13.4.1 How do I update the jackson-databind library in Liferay DXP? Security vulnerabilities in jackson-databind 2.13.2.2: CVE-2022-42003, CVE-2022-42004 Environment Liferay DXP 7.2+...

Issue An Asset Publisher (AP) can be configured to filter by certain categories and/or tags. When the Display Settings of the AP has Show Add Content Button enabled, it's possible to create new assets directly from the AP. In some cases, the asset created already has filled out the...

Issue Pre-assigned roles are being issued/revoked during the "Assign Roles" action when using multiple pages during the "Assign Roles" stage. When navigating through multiple pages, a previously issued/revoked role will auto-revert back to its initial setting when navigating back to the...