[LPS-54693] Denial-of-service attack with InvokerFilter - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Resolution: Duplicate
Affects Version/s: 6.1.20 EE GA2
Fix Version/s: 6.1.30 EE GA3
Component/s: Security Vulnerability
Labels:
None

Description

By manipulation the URL, an attacker can cause the portal to return a page not found error even when the URL represents an actual page.

Attachments

Activity

People

Assignee:

Samuel Kong

Reporter:

Samuel Kong

Participants of an Issue:

Samuel Kong

Recent user:

Esther Sanz

Votes:

0 Vote for this issue

Watchers:

0 Start watching this issue

Dates

Created:

02/Apr/15 2:16 AM

Updated:

02/Dec/15 4:39 AM

Resolved:

02/Apr/15 2:16 AM

Days since last comment:

4 years, 25 weeks, 3 days ago

Packages

Version	Package
6.1.30 EE GA3