[LPE-16598] LSV-412: RCE using JSON Deserialization - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: 6.1 EE GA1 (6.1.10), 6.1 EE GA2 (6.1.20), 6.1 EE GA3 (6.1.30), 6.2 EE GA1 (6.2.10)
Fix Version/s: 6.1.X EE, 6.2.X EE
Component/s: Security Vulnerability, Web Services > JSON WS
Labels:

Fix Pack Status:
Scheduled
Business Value:
5

Description

See also https://help.liferay.com/hc/en-us/articles/360020526952.

Attachments

Activity

People

Assignee:

Joshua Cords

Reporter:

Tibor Lipusz

Votes:

0 Vote for this issue

Watchers:

1 Start watching this issue

Dates

Created:

06/Dec/18 1:20 PM

Updated:

26/Jun/19 5:26 AM

Resolved:

11/Dec/18 8:59 AM

Packages

Version	Package
6.1.X EE
6.2.X EE