Lucene search
PRIOn knowledge basePRION:CVE-2011-1503HistoryMay 07, 2011 - 7:55 p.m.
Design/Logic Flaw
2011-05-0719:55:00
PRIOn knowledge base
www.prio-n.com
3
The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| liferay_portal | ge | 5.1.0 | |
| liferay_portal | le | 5.1.2 | |
| liferay_portal | ge | 5.2.0 | |
| liferay_portal | le | 5.2.3 | |
| liferay_portal | ge | 6.0.0 | |
| liferay_portal | le | 6.0.5 |
Related
cve
cve
CVE-2011-1503
2022-10-03 16:15:10
veracode
veracode
Directory Traversal
2019-03-25 08:40:40
nvd
nvd
CVE-2011-1503
2011-05-07 19:55:00
cvelist
cvelist
CVE-2011-1503
2022-10-03 16:15:10
nessus
nessus
Liferay Portal < 6.0.6 Multiple Vulnerabilities
2012-05-22 00:00:00