Логотип exploitDog
bind:CVE-2020-15839
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-15839

Количество 2

Количество 2

nvd логотип

CVE-2020-15839

больше 5 лет назад

Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, does not restrict the size of a multipart/form-data POST action, which allows remote authenticated users to conduct denial-of-service attacks by uploading large files.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-c7f6-4vx5-4263

почти 4 года назад

Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-15839

Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, does not restrict the size of a multipart/form-data POST action, which allows remote authenticated users to conduct denial-of-service attacks by uploading large files.

CVSS3: 6.5
1%
Низкий
больше 5 лет назад
github логотип
GHSA-c7f6-4vx5-4263

Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP

CVSS3: 6.5
1%
Низкий
почти 4 года назад

Уязвимостей на страницу