Security Advisory

CVE-2020-28884

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-28 00:00:00

Last updated 2024-08-04 16:41:00

Assigner mitre

State PUBLISHED

Description

Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject Groovy script to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it is a feature for administrators to run groovy scripts and therefore not a design flaw.

← Browse all CVEs View on cve.org ↗