CVE-2020-7961

Related Files

Liferay Portal Remote Code Execution

Posted Jul 12, 2020

Authored by nu11secur1ty

Liferay Portal versions prior to 7.2.1 CE GA2 exploit that gains code execution due to deserialization of untrusted data sent to the JSON web services interface.

tags | exploit, web, code execution

advisories | CVE-2020-7961

SHA-256 | e1dafd7c9c59b24146a4299e719304b99ea83bd888f39c2474bb23a9583cd36a

Download | Favorite | View

Liferay Portal Java Unmarshalling Remote Code Execution

Posted Apr 15, 2020

Authored by Markus Wulftange, wvu, Thomas Etrillard | Site metasploit.com

This Metasploit module exploits a Java unmarshalling vulnerability via JSONWS in Liferay Portal versions prior to 6.2.5 GA6, 7.0.6 GA7, 7.1.3 GA4, and 7.2.1 GA2 to execute code as the Liferay user. Tested against 7.2.0 GA1.

tags | exploit, java

advisories | CVE-2020-7961

SHA-256 | 0a05b28933eea9b4fd536dc8f5ff0aa3f15ae34ce0529c5fa21139b75f041521

Download | Favorite | View