Описание
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.3.3 (исключая)
cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.00643
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-601
Связанные уязвимости
EPSS
Процентиль: 70%
0.00643
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-601