Sploitus

CVE-2020-7961

9 known exploits for CVE-2020-7961

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

Affected products
Liferay Portal
Liferay Liferay Portal
< 7.2.1
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
99.8% (100th percentile)
Weakness
CWE-502
NVD status
Analyzed
Published
2020-03-20
CVE-2020-7961 at NVD
Authoritative description, scoring and affected products

9 known exploits for CVE-2020-7961

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Deserialization of Untrusted Data in Liferay Liferay_Portal
2025-09-04 neverhavenameeGITHUB
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari
2022-01-23 halftionGITEE
Exploit for Deserialization of Untrusted Data in Liferay Liferay_Portal
2021-01-14 ShutdownRepoGITHUB
Liferay Portal Remote Code Execution Exploit
2020-07-12 nu11secur1tyZDT
Liferay Portal Remote Code Execution
2020-07-12 nu11secur1tyPACKETSTORM
Liferay Portal Java Unmarshalling Remote Code Execution Exploit
2020-04-16 metasploitZDTRuby
Liferay Portal - Java Unmarshalling via JSONWS RCE (Metasploit)
2020-04-16 MetasploitEXPLOITDBRuby
Liferay Portal Java Unmarshalling Remote Code Execution
2020-04-15 Markus WulftangePACKETSTORMRuby
Liferay Portal Java Unmarshalling via JSONWS RCE
2020-04-14 Markus Wulftange, Thomas Etrillard, wvu <wvu@metasploit.com>METASPLOITRuby