CVE Intelligence

Maven Com.liferay.portal:com.liferay.portal.kernel vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Com.liferay.portal:com.liferay.portal.kernel: 1 record(s), with affected versions and fixes.

CVE-2020-7961 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-502 Mar 20, 2020
Liferay Portal Deserialization of Untrusted Data Vulnerability
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).