GitHub Advisoryadvisory · Maven

GHSA-97gm-mcv6-cphm Shell command injection in Liferay Portal

HIGH Published 2022-05-17 Modified 2024-01-10 Official page ↗
Aliases
CVE-2010-5327
Ecosystem
Maven
Packages
com.liferay.portal:portal-impl, com.liferay.portal:portal-service
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Reviewed
2024-01-10

Affected packages

• Maven com.liferay.portal:portal-impl: < 6.2.11 → fixed in 6.2.11 • Maven com.liferay.portal:portal-service: < 6.2.11 → fixed in 6.2.11

Description

Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.

Related

Alias · CVE (1)

  • CVE-2010-5327 Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template. vulnerability

References