Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2011-1503

The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.

Published: May 7, 2011
Updated: Nov 9, 2025
CVE: CVE-2011-1503
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:P/I:N/A:N

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
liferay / liferay_portal	5.1.0	5.1.2.x
liferay / liferay_portal	5.2.0	5.2.3.x
liferay / liferay_portal	6.0.0	6.0.5.x

http://issues.liferay.com/browse/LPS-13762
http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
http://openwall.com/lists/oss-security/2011/03/29/1
http://openwall.com/lists/oss-security/2011/04/08/5
http://openwall.com/lists/oss-security/2011/04/11/9

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo