Lucene search
Veracode Vulnerability DatabaseVERACODE:25663HistoryJun 11, 2020 - 8:54 a.m.
Remote Code Execution
2020-06-1108:54:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.021 Low
EPSS
Percentile
89.2%
portal-impl is vulnerable to remote code execution. The template API does not properly restrict user access to template objects, allowing an attacker to execute arbitrary code on the system using malicious FreeMarker and Velocity templates.
| CPE | Name | Operator | Version |
|---|---|---|---|
| liferay portal impl | eq | 7.0.0-nightly | |
| liferay portal impl | le | 6.2.5 |
Related
osv
osv
CVE-2020-13445
2020-06-10 19:15:09
cve
cve
CVE-2020-13445
2020-06-10 19:15:09
nvd
nvd
CVE-2020-13445
2020-06-10 19:15:09
prion
prion
Code injection
2020-06-10 19:15:00
cvelist
cvelist
CVE-2020-13445
2020-06-10 18:09:38
openvas
openvas