Description
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14765 Vulnerability (CVE-2020-14765)
Oracle Database Server CVE-2009-1019 Vulnerability (CVE-2009-1019)
WordPress Plugin Booking Package-Appointment Booking Calendar System Cross-Site Scripting (1.5.10)
WordPress Plugin CalendApp Cross-Site Scripting (1.1)
WordPress Plugin Custom Fields Search by BestWebSoft Cross-Site Scripting (1.3.1)