Description

Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.

Remediation

References

CVE-2019-16891

Related Vulnerabilities

WordPress Plugin Community Events 'id' Parameter SQL Injection (1.2.2)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (6.4.2)

WordPress Plugin WP User Manager-User Profile Builder & Membership Security Bypass (2.6.2)

Apache HTTP Server Other Vulnerability (CVE-2003-1307)

SharePoint CVE-2022-41061 Vulnerability (CVE-2022-41061)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-502 CVE-2019-16891