Design/Logic Flaw

2020-09-2218:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, does not restrict the size of a multipart/form-data POST action, which allows remote authenticated users to conduct denial-of-service attacks by uploading large files.

CPENameOperatorVersion
digital_experience_platformeq7.2
digital_experience_platformeq7.2 fixpack1
digital_experience_platformeq7.2 fixpack2
digital_experience_platformeq7.2 fixpack3
digital_experience_platformeq7.2 fixpack5
digital_experience_platformeq7.2 fixpack4
digital_experience_platformeq7.1 fixpack6
digital_experience_platformeq7.1 fixpack9
digital_experience_platformeq7.1 fixpack10
digital_experience_platformeq7.1 fixpack11

Name	Operator	Version
digital_experience_platform	eq	7.2
digital_experience_platform	eq	7.2 fixpack1
digital_experience_platform	eq	7.2 fixpack2
digital_experience_platform	eq	7.2 fixpack3
digital_experience_platform	eq	7.2 fixpack5
digital_experience_platform	eq	7.2 fixpack4
digital_experience_platform	eq	7.1 fixpack6
digital_experience_platform	eq	7.1 fixpack9
digital_experience_platform	eq	7.1 fixpack10
digital_experience_platform	eq	7.1 fixpack11