Lucene search

K
cvelistMitreCVELIST:CVE-2021-33990
HistoryApr 16, 2023 - 12:00 a.m.

CVE-2021-33990

2023-04-1600:00:00
mitre
www.cve.org
6
liferay portal
command fileupload
fileupload vulnerability

AI Score

9.7

Confidence

High

EPSS

0.048

Percentile

92.9%

Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the exploit reference link only shows frmfolders.html is accessible and does not demonstrate how an unauthorized user can upload a file.

AI Score

9.7

Confidence

High

EPSS

0.048

Percentile

92.9%