Lucene search
MitreCVELIST:CVE-2020-15840HistorySep 24, 2020 - 2:56 p.m.
CVE-2020-15840
2020-09-2414:56:23
mitre
www.cve.org
0.001 Low
EPSS
Percentile
47.1%
In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property ‘portlet.resource.id.banned.paths.regexp’ can be bypassed with doubled encoded URLs.
Related
osv
osv
CVE-2020-15840
2020-09-24 15:15:14
nvd
nvd
CVE-2020-15840
2020-09-24 15:15:14
prion
prion
Code injection
2020-09-24 15:15:00
cve
cve
CVE-2020-15840
2020-09-24 15:15:14
veracode
veracode
Authorization Bypass
2020-09-25 03:54:55
openvas
openvas
Liferay Portal < 7.3.1 Information Disclosure Vulnerability
2020-09-28 00:00:00