Description
uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet.
Remediation
References
http://www.jasig.org/uportal/download/uportal-4-0-13-1
https://issues.jasig.org/browse/UP-4106
Related Vulnerabilities
CVE-2021-29442 Vulnerability in maven package com.alibaba.nacos:nacos-common
CVE-2022-39263 Vulnerability in npm package next-auth
CVE-2020-7729 Vulnerability in npm package grunt
CVE-2023-40014 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2021-27568 Vulnerability in maven package net.minidev:json-smart