CVE-2020-13445

EUVD-2020-5698 · Published May 24, 2022

Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution

In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the template API does not restrict user access to sensitive objects, which allows remote authenticated users to execute arbitrary code via crafted FreeMarker and Velocity templates.

Technologies

Liferay Liferay Portal

Weaknesses

CWE-862CWE-74

CVSS scores

v3.18.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Persistence Stealth Defense Impairment Credential Access

T1190Exploit Public-Facing Application T1027Obfuscated Files or Information T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process T1574.006Dynamic Linker Hijacking T1574.007Path Interception by PATH Environment Variable T1690Prevent Command History Logging

References

Potentially impacted assets

See if this affects your attack surface