5 matches found
au.com.permeance:liferay-clojure-integration (0.1), com.liferay.maven.plugins:liferay-maven-plugin (>=6.0.2, <=6.0.6) +8 more potentially affected by CVE-2010-5327 via com.liferay.portal:portal-impl (>=6.0.2, <=6.2.5)
com.liferay.portal:portal-impl MAVEN version =6.0.2, =6.0.2, =6.1.2, =6.0.2, =2.0.11, =2.0.17, =2.4-rc1, =1.0, =2.0, =2.5 Source cves: CVE-2010-5327 Source advisory: GHSA-97GM-MCV6-CPHM...
com.liferay.portal:util-taglib (5.2.3) potentially affected by CVE-2010-5327 via com.liferay.portal:portal-impl (5.2.3)
com.liferay.portal:portal-impl MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:portal-impl and may be impacted: - com.liferay.portal:util-taglib 5.2.3 Source cves: CVE-2010-5327 Source advisory:...
com.liferay.faces:liferay-faces-bridge-impl (>=3.0.1-legacy-ga2, <=3.0.5-legacy-ga6), com.liferay.faces:liferay-faces-portal (>=3.0.0-legacy-ga1, <=3.0.5-legacy-ga6) +4 more potentially affected by CVE-2010-5327 via com.liferay.portal:portal-service (5.2.3)
com.liferay.portal:portal-service MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:portal-service and may be impacted: - com.liferay.faces:liferay-faces-bridge-impl =3.0.1-legacy-ga2, =3.0.0-legacy-ga1,...
CVE-2010-5327
CVE-2010-5327 affects Liferay Portal up to version 6.2.10. The issue is a remote code execution via a crafted Velocity template, enabling remote authenticated users to execute arbitrary shell commands. The connected sources corroborate a velocity/template-based command injection in Liferay Portal...
