CVE-2010-5327
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar com.liferay.portal:portal-impl+ Monitorar com.liferay.portal:portal-service
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.8%
Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.
Produtos afetados
n/a · n/aReferências
https://dev.liferay.com/web/community-security-team/known-vulnerabilitieshttps://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/lps-64547-remote-code-execution-and-privilege-escalation-in-templateshttps://github.com/liferay/liferay-portal/commit/90c4e85a8f8135f069f3f05e4d54a77704769f91https://issues.liferay.com/browse/LPE-14964https://issues.liferay.com/browse/LPS-64547https://issues.liferay.com/browse/LPS-7087