Liferay Portal CVE-2020-15840 Vulnerability (CVE-2020-15840)

Description

In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.

Remediation

References

CVE-2020-15840

Related Vulnerabilities

Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0272)

WordPress Plugin SG Optimizer Multiple Vulnerabilities (3.3.5)

WordPress Plugin Admin Custom Login Cross-Site Request Forgery (3.2.7)

Magento CVE-2019-8119 Vulnerability (CVE-2019-8119)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11047)

Severity

Medium

Classification