- Vendor / Project
- Liferay
- Product
- Liferay Portal
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-502
Description
Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.
Required action
Apply updates per vendor instructions.