Lucene search
MitreCVELIST:CVE-2020-7961HistoryMar 20, 2020 - 6:16 p.m.
CVE-2020-7961
2020-03-2018:16:42
mitre
www.cve.org
1
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).
References
packetstormsecurity.com/files/157254/Liferay-Portal-Java-Unmarshalling-Remote-Code-Execution.html
packetstormsecurity.com/files/158392/Liferay-Portal-Remote-Code-Execution.html
portal.liferay.dev/learn/security/known-vulnerabilities
portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/117954271
research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet/
Related
zdt
zdt
Liferay Portal Java Unmarshalling Remote Code Execution Exploit
2020-04-16 00:00:00
Liferay Portal Remote Code Execution Exploit
2020-07-12 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Liferay Liferay Portal
2021-01-14 19:18:13
Exploit for Deserialization of Untrusted Data in Liferay Liferay Portal
2020-10-17 08:32:51
Exploit for Deserialization of Untrusted Data in Liferay Liferay Portal
2020-12-08 08:22:18
github
github
Deserialization of Untrusted Data in Liferay Portal
2022-05-24 17:12:05
packetstorm
packetstorm
Liferay Portal Java Unmarshalling Remote Code Execution
2020-04-15 00:00:00
Liferay Portal Remote Code Execution
2020-07-12 00:00:00
nessus
nessus
Liferay Portal Remote Code Execution (direct check)
2021-02-25 00:00:00
prion
prion
Deserialization of untrusted data
2020-03-20 19:15:00
nuclei
nuclei
Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution
2020-07-03 17:54:34
openvas
openvas
Liferay Portal JSON Web Service RCE Vulnerabilities (CST-7111, CST-7205)
2020-03-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Liferay Portal Insecure Deserialization (CVE-2020-7961)
2020-05-10 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-06-01 02:05:13
cisa_kev
cisa_kev
Liferay Portal Deserialization of Untrusted Data Vulnerability
2021-11-03 00:00:00
osv
osv
Deserialization of Untrusted Data in Liferay Portal
2022-05-24 17:12:05
cve
cve
CVE-2020-7961
2020-03-20 19:15:12
nvd
nvd
CVE-2020-7961
2020-03-20 19:15:12
metasploit
metasploit
Liferay Portal Java Unmarshalling via JSONWS RCE
2020-04-14 19:01:17
exploitdb
exploitdb
Liferay Portal - Java Unmarshalling via JSONWS RCE (Metasploit)
2020-04-16 00:00:00
attackerkb
attackerkb
CVE-2020-7961
2020-03-20 00:00:00
threatpost
threatpost
Linux Devices Under Attack by New FreakOut Malware
2021-01-19 15:51:30
impervablog
impervablog
Python Cryptominer Botnet Quickly Adopts Latest Vulnerabilities
2021-01-14 17:04:59
thn
thn