~ / search / GHSA-97gm-mcv6-cphm

GHSA-97gm-mcv6-cphm

Shell command injection in Liferay Portal

Source: GitHub Advisory Database (reviewed) High CVE-2010-5327

Packages

EcosystemPackageAffectedFixed in
Maven com.liferay.portal:portal-impl < 6.2.11 6.2.11
Maven com.liferay.portal:portal-service < 6.2.11 6.2.11

Details

As written in the advisory (Markdown source, shown as plain text).

Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.

References

External links from the advisory. They lead to third-party sites.