In breve
- CVE-2020-24554 è una vulnerabilità ALTO (CVSS 7.5) che riguarda com.liferay.portal:release.portal.bom, liferay portal (liferay).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.0% delle vulnerabilità.
- Correzione: aggiornare a 7.3.3 o successiva.
Description
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
NVD description
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
Altre vulnerabilità di com.liferay.portal:release.portal.bom
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free