CVE-2021-33990

CVSS V2 None CVSS V3 None
Description
Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists.
Overview
  • CVE ID
  • CVE-2021-33990
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-04-16T04:15:07
  • Last Modified Date
  • 2023-04-25T20:56:10
Weakness Enumerations
CWE URL
CWE-281 http://cwe.mitre.org/data/definitions/281.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:liferay:liferay_portal:6.2.5:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
http://packetstormsecurity.com/files/171701/Liferay-Portal-6.2.5-Insecure-Permissions.html
https://github.com/fu2x2000/Liferay_exploit_Poc
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2021-33990
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33990
History
Created Old Value New Value Data Type Notes
2023-04-17 04:48:48 Added to TrackCVE
2023-04-17 14:01:47 2023-04-17T13:12:43 CVE Modified Date updated
2023-04-17 14:01:47 Received Awaiting Analysis Vulnerability Status updated
2023-04-21 13:00:40 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-04-25 21:00:55 2023-04-25T20:56:10 CVE Modified Date updated
2023-04-25 21:00:55 Undergoing Analysis Analyzed Vulnerability Status updated
2023-04-25 21:00:57 Weakness Enumeration new
2023-04-25 21:01:00 CPE Information updated