Known Vulnerabilities

CST-7029 Denial of service vulnerability via the editing of a wiki page

Description

In Liferay Portal 7.0 CE GA4 and earlier, authenticated user with permissions to create or edit a Wiki page can cause a denial of service (DoS) in the portal via crafted form parameters.

Severity

Severity 1

Fixed Version(s)

7.0.3-ce-ga4-security-1.0 patch (source)
March 2020 source patch for Liferay Portal 6.2.5. Details for working with source patches can be found on the Patching Liferay Portal page.

Publication date: Mon, 07 Aug 2017 08:09:00 +0000

Community

Company

Feedback

Known Vulnerabilities

Releases

Description

Severity

Fixed Version(s)