5.3
CVE-2020-15840
- EPSS 0.25%
- Published 24.09.2020 15:15:14
- Last modified 13.05.2025 18:17:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.
Data is provided by the National Vulnerability Database (NVD)
Liferay ≫ Digital Experience Platform Version7.0
Liferay ≫ Digital Experience Platform Version7.1
Liferay ≫ Digital Experience Platform Version7.2
Liferay ≫ Liferay Portal Version < 7.3.1
Liferay ≫ Liferay Portal Version6.2 Update- SwEditionenterprise
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.453 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|