[LPE-16598] LSV-412: RCE using JSON Deserialization - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: 6.1 EE GA1 (6.1.10), 6.1 EE GA2 (6.1.20), 6.1 EE GA3 (6.1.30), 6.2 EE GA1 (6.2.10)
Fix Version/s: 6.1.X EE, 6.2.X EE
Component/s: Security Vulnerability, Web Services > JSON WS
Labels:

Fix Pack Status:
Scheduled
Business Value:
5

Description

See also https://help.liferay.com/hc/en-us/articles/360020526952.

Attachments

Activity

People

Assignee:: Joshua Cords

Reporter:: Tibor Lipusz

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 06/Dec/18 1:20 PM

Updated:: 26/Jun/19 5:26 AM

Resolved:: 11/Dec/18 8:59 AM

Packages

Version	Package
6.1.X EE
6.2.X EE