NVD

Id
8434  
Name
CVE-2011-1503  
Description
The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-05-07  
Modified Date
2011-05-31  
Seq
2011-1503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48357 8434 CVE-2011-1503 http://issues.liferay.com/browse/LPS-13762  View
48358 8434 CVE-2011-1503 http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952  View
48359 8434 CVE-2011-1503 [oss-security] 20110329 CVE requests : Liferay 6.0.6  View
48360 8434 CVE-2011-1503 [oss-security] 20110408 Re: CVE requests : Liferay 6.0.6  View
48361 8434 CVE-2011-1503 [oss-security] 20110411 Re: CVE requests : Liferay 6.0.6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37816 JVNDB-2010-003601 Liferay Portal CE の XSL Content portlet における任意の XSL および XML ファイルを読まれる脆弱性 Liferay Portal Community Edition (CE) の XSL Content portlet には、Apache Tomcat または Oracle GlassFish を使用している際、任意の XSL および XML ファイルを読まれる脆弱性が存在します。 CVE-2011-1503 49410 CVE-2011-1503 8434 3.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003601.html 2010-11-09 2012-03-27 View