[LPS-54693] Denial-of-service attack with InvokerFilter - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Resolution: Duplicate
Affects Version/s: 6.1.20 EE GA2
Fix Version/s: 6.1.30 EE GA3
Component/s: Security Vulnerability
Labels:
None

Description

By manipulation the URL, an attacker can cause the portal to return a page not found error even when the URL represents an actual page.

Attachments

Activity

People

Assignee:: Samuel Kong

Reporter:: Samuel Kong

Participants of an Issue:: Samuel Kong

Recent user:: Esther Sanz

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 02/Apr/15 2:16 AM

Updated:: 02/Dec/15 4:39 AM

Resolved:: 02/Apr/15 2:16 AM

Days since last comment:: 5 years, 48 weeks, 4 days ago

Packages

Version	Package
6.1.30 EE GA3