CVE-2020-7961 PoC — Liferay Portal 代码问题漏洞

Source

https://github.com/ShutdownRepo/CVE-2020-7961

Associated Vulnerability

Title:Liferay Portal 代码问题漏洞 (CVE-2020-7961)
Description:Liferay Portal是美国Liferay公司的一套基于J2EE的门户解决方案。该方案使用了EJB以及JMS等技术，并可作为Web发布和共享工作区、企业协作平台、社交网络等。 Liferay Portal 7.2.1 CE GA2之前版本中存在代码问题漏洞。远程攻击者可借助JSON Web服务利用该漏洞执行任意代码。

Description

Exploit script for CVE-2020-7961

Readme

# CVE-2020-7961
Exploit script for CVE-2020-7961
Unauthenticated Remote code execution via JSONWS

# References & inspirations

- original blogpost : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html
- synacktiv blogpost : https://www.synacktiv.com/publications/how-to-exploit-liferay-cve-2020-7961-quick-journey-to-poc.html
- code base #1 : https://github.com/random-robbie/liferay-pwn
- code base #2 : https://github.com/mzer0one/CVE-2020-7961-POC

File Snapshot


 [4.0K]  /data/pocs/b7adf6dda251c8442d3b8f036dfd410352d5925c
├── [ 13K]  CVE-2020-7961.py
├── [ 34K]  LICENSE
└── [ 472]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!