Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-95h4-8mqc-4mpf

Опубликовано: 16 сент. 2025
Источник: github
Github: Прошло ревью
CVSS4: 6.9

Описание

Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC

Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to perform a denial-of-service (DoS) attacks via a crafted XML-RPC request.

Пакеты

Наименование

com.liferay.portal:com.liferay.portal.impl

maven
Затронутые версииВерсия исправления

< 101.0.0

101.0.0

EPSS

Процентиль: 50%
0.00272
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-606

Связанные уязвимости

CVSS3: 7.5
nvd
5 месяцев назад

Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to perform a denial-of-service (DoS) attacks via a crafted XML-RPC request.

EPSS

Процентиль: 50%
0.00272
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-606