Unscored CVE-2016-6517 EUVD-2016-7439GHSA-3jfc-fh8w-4r9g

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the…

Published Jan 23, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the minifierBundleDir parameter to barebone.jsp.

References

[oss-security] 20160801 Re: CVE:Request - Path Traversal Barebone.jsp - Liferay 5.1.0 mailing-list
92215 vdb-entry
[oss-security] 20160801 CVE:Request - Path Traversal Barebone.jsp - Liferay 5.1.0 mailing-list