CVE-2011-1503

Published: May 7, 2011

Modified: Sep 17, 2024

PUBLISHED

Description

The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20110408 Re: CVE requests : Liferay 6.0.6

mailing-list

x_refsource_MLIST

[oss-security] 20110411 Re: CVE requests : Liferay 6.0.6

mailing-list

x_refsource_MLIST

[oss-security] 20110329 CVE requests : Liferay 6.0.6

mailing-list

x_refsource_MLIST

http://issues.liferay.com/browse/LPS-13762

x_refsource_CONFIRM

http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2011-1503

Description

Affected Products

References