CVE-2020-28884

概要

参考情報

• learn.liferay.com/dxp/latest/en/system-administration/using-the-script-engine/running-scripts-from-the-script-console.html · Vendor Advisory
• medium.com/%40tranpdanh/some-way-to-execute-os-command-in-liferay-portal-84498bde18d3

liferay portal のその他の脆弱性

• CVE-2025-62275中 5.3Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 thr…
• CVE-2025-62276中 5.5The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay D…
• CVE-2025-62267中 6.1Multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page in Liferay Portal 7.4.3.35 through 7.4.3…
• CVE-2025-62264中 6.1Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q…
• CVE-2025-62265中 5.4Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and …