Directory traversal

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E encoded dot dot in the minifierBundleDir parameter to barebone.jsp...

PT-2017-8986

Name of the Vulnerable Software and Affected Versions Liferay version 5.1.0 Description A directory traversal issue exists, allowing remote attackers to have an unspecified impact by providing a %2E%2E encoded dot dot in the minifierBundleDir parameter to the "barebone.jsp" endpoint...

CVE-2016-6517: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E encoded dot dot in the minifierBundleDir parameter to barebone.jsp...

Liferay Path Traversal Vulnerability

Liferay is the U.S. Liferay company's set of J2EE-based portal solutions , it uses EJB and JMS and other technologies , and can be used as a Web publishing and sharing workspace , enterprise collaboration platforms , social networks and so on. A path traversal vulnerability exists in the...

Liferay Portal 'barebone.jsp' Directory Traversal Vulnerability

Liferay is a J2EE-based portal solution that uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, an enterprise collaboration platform, a social network, and more. A directory traversal vulnerability exists in Liferay Portal 'barebone.jsp', which...