exploitDog

CVE-2010-5327

Опубликовано: 13 янв. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.

Ссылки

https://dev.liferay.com/web/community-security-team/known-vulnerabilities
Patch
Vendor Advisory
https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/lps-64547-remote-code-execution-and-privilege-escalation-in-templates
Patch
Vendor Advisory
https://github.com/liferay/liferay-portal/commit/90c4e85a8f8135f069f3f05e4d54a77704769f91
Issue Tracking
Patch
https://issues.liferay.com/browse/LPE-14964
Issue Tracking
https://issues.liferay.com/browse/LPS-64547
Issue Tracking
https://issues.liferay.com/browse/LPS-7087
Issue Tracking
https://dev.liferay.com/web/community-security-team/known-vulnerabilities
Patch
Vendor Advisory
https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/lps-64547-remote-code-execution-and-privilege-escalation-in-templates
Patch
Vendor Advisory
https://github.com/liferay/liferay-portal/commit/90c4e85a8f8135f069f3f05e4d54a77704769f91
Issue Tracking
Patch
https://issues.liferay.com/browse/LPE-14964
Issue Tracking
https://issues.liferay.com/browse/LPS-64547
Issue Tracking
https://issues.liferay.com/browse/LPS-7087
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*

Версия до 6.2.10 (включая)

EPSS

Процентиль: 81%

0.0151

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-97gm-mcv6-cphm

CVSS3: 8.8

github

больше 3 лет назад

Shell command injection in Liferay Portal

EPSS

Процентиль: 81%

0.0151

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-264