Arbitrary Command Execution in Liferay Portal through 6.2.10 via Crafted Velocity Template

Arbitrary Command Execution in Liferay Portal through 6.2.10 via Crafted Velocity Template

CVE-2010-5327 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.

Learn more about our User Device Pen Test.