Security Advisory
CVE-2020-7961
9.8
CRITICAL
Vulnerability Description
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).
Published Date
March 20, 2020
Official Source
NIST NVD Advisory