CVE-2020-7961
LI
Liferay Liferay Portal
Liferay Portal Deserialization of Untrusted Data Vulnerability
What it is
Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.