Liferay 6.2.3 CE GA4 OpenID XXE Injection

Discussion in 'News Aggregator' started by Packet Storm, 4 Jun 2016.

  1. Packet Storm

    Packet Storm Guest

    Liferay supports OpenID login which was found to make use of a version of openid4java that is vulnerable to XML External Entity (XXE) attacks. Liferay versions 6.2.3 CE GA4 and earlier are affected.

    Continue reading...
     
    #1 Packet Storm, 4 Jun 2016
(You must log in or sign up to post here.)

Share This Page

Loading...