Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-14726

Remote command execution in portlet "XSL content"

    Details

    • Branch Version/s:
      6.0.x, 5.1.x
    • Backported to Branch:
      Committed

      Description

      Given the impact of this security bug, I prefer not to disclose details on a public bug tracker. Please set this ticket to 'private' or ask for details by email. My public GPG key is available online : http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0F7F7D6325E7DDEA

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              samuel.kong Samuel Kong
              Reporter:
              ngregoire Nicolas Gregoire (Inactive)
              Participants of an Issue:
              Recent user:
              Marta Elicegui
              Votes:
              2 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                9 years, 32 weeks, 6 days ago

                  Packages

                  Version Package
                  --Sprint - SP
                  6.0.6 GA
                  --Sprint 12/11
                  6.1.0 CE RC1