Description (CNA)
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.liferay.com/downloads-community
- https://www.youtube.com/watch?v=DjMEfQW3bf0
- https://sec.vnpt.vn/2019/09/liferay-deserialization-json-deserialization-part-4/
- https://dappsec.substack.com/p/an-advisory-for-cve-2019-16891-from
ADP enrichment
No English description supplied.