Security Advisory

CVE-2020-15842

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-20 01:06:54

Last updated 2024-08-04 13:30:22

Assigner mitre

State PUBLISHED

Description

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.

← Browse all CVEs View on cve.org ↗