CyberSec.Space Logo
Back to CVE Browser

CVE-2019-16891

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1950%
EPSS Percentile43.00th
PublishedOct 4, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.

Affected Platforms (CPE)

📦
Liferay

Liferay Portal

<= 6.0.6
📦
Liferay

Liferay Portal

= 6.1.0
📦
Liferay

Liferay Portal

= 6.1.0
📦
Liferay

Liferay Portal

= 6.1.0
📦
Liferay

Liferay Portal

= 6.1.0
📦
Liferay

Liferay Portal

= 6.1.0
📦
Liferay

Liferay Portal

= 6.1.0
📦
Liferay

Liferay Portal

= 6.1.1
📦
Liferay

Liferay Portal

= 6.1.2
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.0
📦
Liferay

Liferay Portal

= 6.2.1
📦
Liferay

Liferay Portal

= 6.2.2
📦
Liferay

Liferay Portal

= 6.2.3
📦
Liferay

Liferay Portal

= 6.2.4
📦
Liferay

Liferay Portal

= 6.2.5
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.0
📦
Liferay

Liferay Portal

= 7.0.1
📦
Liferay

Liferay Portal

= 7.0.2
📦
Liferay

Liferay Portal

= 7.0.3
📦
Liferay

Liferay Portal

= 7.0.4
📦
Liferay

Liferay Portal

= 7.0.5
📦
Liferay

Liferay Portal

= 7.0.6
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.0
📦
Liferay

Liferay Portal

= 7.1.1
📦
Liferay

Liferay Portal

= 7.1.2
📦
Liferay

Liferay Portal

= 7.1.3
📦
Liferay

Liferay Portal

= 7.2.0
📦
Liferay

Liferay Portal

= 7.2.0
📦
Liferay

Liferay Portal

= 7.2.0
📦
Liferay

Liferay Portal

= 7.2.0
📦
Liferay

Liferay Portal

= 7.2.0
📦
Liferay

Liferay Portal

= 7.2.0
📦
Liferay

Liferay Portal

= 7.2.0
📦
Liferay

Liferay Portal

= 7.2.0

References & Advisories

🔗 https://dappsec.substack.com/p/an-advisory-for-cve-2019-16891-from
🔗 https://sec.vnpt.vn/2019/09/liferay-deserialization-json-deserialization-part-4/
🔗 https://www.liferay.com/downloads-community
🔗 https://www.youtube.com/watch?v=DjMEfQW3bf0
🔗 https://dappsec.substack.com/p/an-advisory-for-cve-2019-16891-from
🔗 https://sec.vnpt.vn/2019/09/liferay-deserialization-json-deserialization-part-4/
🔗 https://www.liferay.com/downloads-community
🔗 https://www.youtube.com/watch?v=DjMEfQW3bf0

Related Vulnerabilities

CVE-2021-339909.8

Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor di...

CVE-2020-79619.8

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JS...

CVE-2020-134458.8

In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the temp...

CVE-2021-290538.8

Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authenticated us...