CVE-2019-16891
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory liferay.com
- report dappsec.substack.com
- report sec.vnpt.vn
- report youtube.com