.. / CVE-2020-7961

• RCE
• Nuclei
• Web

Exploit for Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution (CVE-2020-7961)

Description:

Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

Nuclei Template

View the template here CVE-2020-7961.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-7961.yaml

References: