CVE-2010-5327: High severity Liferay Liferay Portal vulnerability
Published Jan 13, 2017
·Updated
Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.
Affected Software
3 affected componentsFixes available
maven/com.liferay.portal:portal-service<6.2.11
6.2.11
maven/com.liferay.portal:portal-impl<6.2.11
6.2.11
Liferay Liferay Portal<=6.2.10
Remediation
Event History
Jan 13, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·03:05 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-5327?
CVE-2010-5327 is considered a critical vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2010-5327?
To fix CVE-2010-5327, upgrade to Liferay Portal version 6.2.11 or later.
3
Who is affected by CVE-2010-5327?
CVE-2010-5327 affects all versions of Liferay Portal up to and including 6.2.10.
4
What type of vulnerability is CVE-2010-5327?
CVE-2010-5327 is a remote command execution vulnerability that allows authenticated users to execute arbitrary shell commands.
5
When was CVE-2010-5327 disclosed?
CVE-2010-5327 was disclosed in 2010 and has been addressed in subsequent updates.