Description

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

Remediation

References

CVE-2011-1571

Related Vulnerabilities

Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-22903)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000406)

Apache 2.x version older than 2.0.48

WordPress Plugin WP Infusionsoft WooCommerce Cross-Site Scripting (1.0.8)

WordPress Plugin Memphis Documents Library Multiple Unspecified Vulnerabilities (3.6.21)

Severity

Medium

Classification

CVE-2011-1571

Tags

Missing Update Known Vulnerabilities