CVE-2020-28885

creationtimestamp| type| source ---|---|--- 2022-01-28 14:23:19+00:00| seen| https://t.me/cibsecurity/36444...

CVE-2020-28885

CVE-2020-28885 affects Liferay Portal Server 7.3.5 GA6 and 7.2.0 GA1. An administrator can inject OS commands via the Gogo Shell module, enabling execution of arbitrary OS commands on the server. Documented impact includes high confidentiality, integrity, and availability risk. Some sources note ...

CVE-2020-28885

Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject commands through the Gogo Shell module to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it is a feature for...