Subscribe via feed.

Liferay 6.2.3 CE GA4 OpenID XXE Injection

Posted by deepcore on June 4, 2016 – 8:33 pm

Liferay supports OpenID login which was found to make use of a version of openid4java that is vulnerable to XML External Entity (XXE) attacks. Liferay versions 6.2.3 CE GA4 and earlier are affected.


This post is under “exploit” and has no respond so far.
If you enjoy this article, make sure you subscribe to my RSS Feed.

Post a reply

You must be logged in to post a comment.


« »