CVE-2020-28885

Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection

published January 28, 2022

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject commands through the Gogo Shell module to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it is a feature for administrators to access and execute commands in Gogo Shell and therefore not a design fla

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02147 · 82.0th percentile
Published
2022-01-28T11:17Z
EPSS history
Timeline
  • 28 JAN 11:17Z
    Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection
    cvelistv5