writeups.xyz / From PostAuth RCE to PreAuth RCE on Liferay Portal

Submitter : c2a

Date: 20 December 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Insecure Deserialization

Programs :

• Liferay

Authors :

• RV Sharma

Link :
https://dappsec.substack.com/p/an-advisory-for-cve-2019-16891-from