Description
Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.
Remediation
References
Related Vulnerabilities
WordPress Plugin Catch Under Construction Security Bypass (1.3.4)
Python Cryptographic Issues Vulnerability (CVE-2012-1150)
WordPress Plugin mTouch Quiz Multiple Vulnerabilities (3.0.6)
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4627)
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42130)