Description

The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.

Remediation

References

CVE-2011-1503

Related Vulnerabilities

Plone CMS Resource Management Errors Vulnerability (CVE-2012-5496)

WordPress Plugin WassUp Real Time Analytics Unspecified Vulnerability (1.7.2)

Jenkins Improper Authentication Vulnerability (CVE-2014-2066)

WordPress Plugin PickPlugins Product Slider for WooCommerce Cross-Site Scripting (1.13.21)

MySQL CVE-2020-2580 Vulnerability (CVE-2020-2580)

Severity

Low

Classification

CVE-2011-1503 CWE-200

Tags

Missing Update Known Vulnerabilities