CVE-2020-24554

2020-09-0114:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.

CPENameOperatorVersion
liferay-portaleq7.2.0-m2
liferay-portaleq7.1.0-a2
liferay-portaleqsync-3.0.6-b7
liferay-portaleqsync-3.0.8-b9
liferay-portaleq6.1.0-b4
liferay-portaleq7.1.0-b1
liferay-portaleq7.3.2-ga3
liferay-portaleqsync-3.0.4-b5
liferay-portaleqsync-3.0.7-b8
liferay-portaleq7.1.0-m2

Name	Operator	Version
liferay-portal	eq	7.2.0-m2
liferay-portal	eq	7.1.0-a2
liferay-portal	eq	sync-3.0.6-b7
liferay-portal	eq	sync-3.0.8-b9
liferay-portal	eq	6.1.0-b4
liferay-portal	eq	7.1.0-b1
liferay-portal	eq	7.3.2-ga3
liferay-portal	eq	sync-3.0.4-b5
liferay-portal	eq	sync-3.0.7-b8
liferay-portal	eq	7.1.0-m2