Deserialization of Untrusted Data in Liferay Enterprise Portal - CVE-2020-7961
Published: March 20, 2020 / Updated: February 20, 2022
Vulnerability identifier: #VU49689
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-7961
CWE-ID: CWE-502
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data within the JSON web services (JSONWS). A remote attacker can pass specially crafted data to the application and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Liferay Enterprise Portal
How to mitigate CVE-2020-7961
Install updates from vendor's website.
Liferay Enterprise Portal - update to 7.2.1
Links to Public Exploits and PoC-codes
- Exploit #5727 - Liferay Portal - Java Unmarshalling via JSONWS RCE (Metasploit) (June 17, 2021)
- Exploit #5275 - LifeRCEJsonWSTool-POC-CVE-2020-7961-Gui () (April 6, 2021)
- Exploit #5273 - CVE-2020-7961-payloads (Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS)) (April 6, 2021)
- Exploit #5270 - GLiferay-CVE-2020-7961-golang (Detect vulns liferay CVE-2020-7961 by Nattroc (EOG Team)) (April 6, 2021)
- Exploit #5059 - GLiferay (Detect vulns liferay CVE-2020-7961 by Nattroc (EOG Team)) (January 24, 2021)
- Exploit #5058 - POC-CVE-2020-7961-Token-iterate (POC-CVE-2020-7961-Token-iterate) (January 24, 2021)
- Exploit #5050 - CVE-2020-7961 (Exploit script for CVE-2020-7961) (January 21, 2021)
- Exploit #5049 - CVE-2020-7961-POC () (January 21, 2021)
- Exploit #5047 - CVE-2020-7961-Mass (CVE-2020–7961 Mass exploit for Script Kiddies) (January 20, 2021)
- Exploit #5045 - Liferay Portal Java Unmarshalling via JSONWS RCE (January 19, 2021)
External References
- http://packetstormsecurity.com/files/157254/Liferay-Portal-Java-Unmarshalling-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/158392/Liferay-Portal-Remote-Code-Execution.html
- https://portal.liferay.dev/learn/security/known-vulnerabilities
- https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/117954271