296,748
Total vulnerabilities in the database
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).
| Software | From | Fixed in |
|---|---|---|
com.liferay.portal / com.liferay.portal-kernel
|
- | 7.2.1 |
| liferay / liferay_portal | - | 7.2.1 |