~ / search / GHSA-vrwx-q9pj-x488

GHSA-vrwx-q9pj-x488

Liferay Portal and Liferay DXP Bypass via Double Encoded URL

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-15840

Packages

EcosystemPackageAffectedFixed in
Maven com.liferay.portal:com.liferay.portal.impl >= 7.2.0, < 7.4.0 7.4.0
Maven com.liferay.portal:release.dxp.bom < 7.0.10.fp93 7.0.10.fp93
Maven com.liferay.portal:release.dxp.bom >= 7.1.0, < 7.1.10.fp19 7.1.10.fp19
Maven com.liferay.portal:release.dxp.bom >= 7.2.0, < 7.2.10.fp7 7.2.10.fp7
Maven com.liferay.portal:release.portal.bom < 7.3.1 7.3.1
Maven com.liferay.portal:com.liferay.portal.impl < 7.1.3 7.1.3

Details

As written in the advisory (Markdown source, shown as plain text).

In Liferay Portal before 7.3.1, com.liferay.portal:com.liferay.portal.impl before 7.1.3 and 7.4.0, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.

References

External links from the advisory. They lead to third-party sites.