Liferay Portal vulnerable to arbitrary command injection

MÉDIO 6.8CVE-2011-1571 · GHSA-rpj9-pc39-h8j8 · Published 07/05/2011 · updated 16/06/2026

Em resumo

CVE-2011-1571 é uma vulnerabilidade MÉDIO (CVSS 6.8) que afeta com.liferay.portal:portal-service, liferay portal (liferay).
Chance de exploração nos próximos 30 dias (EPSS): 8.5%, maior que 95.0% das vulnerabilidades.
Correção: atualize para 6.0.6-ga ou posterior.

Package	Affected versions	Patched versions
com.liferay.portal:portal-service Maven	`≥ 5.0.0, < 6.0.6-ga`	`6.0.6-ga`
liferay portal liferay	`≥ 5.1.0, ≤ 5.1.2≥ 6.0.0, ≤ 6.0.5`	No fix yet

Description

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2011-1571 · ADVISORY
liferay/liferay-portal commit 55502ca · WEB
liferay/liferay-portal · PACKAGE
issues.liferay.com/browse/LPS-14726 · WEB
issues.liferay.com/secure/ReleaseNote.jspa · WEB
openwall.com/lists/oss-security/2011/03/29/1 · WEB
openwall.com/lists/oss-security/2011/04/08/5 · WEB
openwall.com/lists/oss-security/2011/04/11/9 · WEB

Mais vulnerabilidades de com.liferay.portal:portal-service

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free