Description

The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.

Remediation

References

CVE-2020-24554

Related Vulnerabilities

WordPress Plugin GeSHi Source Colorer Cross-Site Scripting (0.13)

WordPress Plugin PayPal Shopping Cart Multiple Vulnerabilities (1.1.9)

ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6521)

Rukovoditel Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11821)

Envoy Proxy Improper Handling of Exceptional Conditions Vulnerability (CVE-2024-23325)

Severity

High

Classification

CVE-2020-24554 CWE-601 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities