Description
Liferay TunnelServlet is vulnerable to deserialization attacks and, due to incorrect configuration, is accessible to an attacker (by default, it is restricted to localhost only). Depending on exact version of Liferay Portal, an attacker could exploit this vulnerability using specially-crafted serialized data to execute arbitrary code on the system or to perform denial of service attack.
Remediation
Restrict access to the vulnerable endpoints.
References
Related Vulnerabilities
Bash code injection vulnerability
WordPress Plugin Gutenberg Block Editor Toolkit-EditorsKit Remote Code Execution (1.31.5)
Apache Log4j2 JNDI Remote Code Execution (delayed)
WordPress Plugin UnGallery 'search' Parameter Remote Arbitrary Command Execution (2.1.5)
D-Link NAS Backdoor Account RCE (CVE-2024-3273, CVE-2024-3272)