CVE-2020-7961

Description

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

94.352

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-7961 are fixed in Liferay-com.liferay.portal.kernel 4.35.3	Windows
Vulnerabilities CVE-2020-7961 are fixed in Liferay-com.liferay.portal.kernel for Linux 4.35.3	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234