Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13505
HistoryMar 25, 2019 - 8:40 a.m.

Directory Traversal

2019-03-2508:40:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

51.8%

Liferay portal is vulnerable to directory traversal.XSL content portlet paths for XSL and XML content is not validated and allows a remote attacker to retrieve system files by submitting file:/// in the URL.

CPENameOperatorVersion
liferay portal implle6.0.5

0.002 Low

EPSS

Percentile

51.8%

Related for VERACODE:13505