CVE

CVE-2020-7961

Liferay Portal Deserialization of Untrusted Data Vulnerability

Liferay · Liferay Portal

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.