[darkspeed]

Affected Versions:

• Liferay Portal CE: 7.0 GA3, 7.0.1 GA2, 7.0.2 GA3
  
• Liferay Portal EE: 6.0, 6.0 SP1, 6.0 SP2, 6.1 GA1, 6.1 GA2, 6.1 GA3, 6.2
  

Bypass Technique:

• Filter Bypass:
  • ////api///////liferay
    
  • ///api///////spring
    
  • Nginx Forwarding Fails:
    /#/../api/liferay
    

PoC Exploit Code:

Hidden Content

You must register or login to view this content.

[wsamx166]

Affected Versions:

• Liferay Portal CE: 7.0 GA3, 7.0.1 GA2, 7.0.2 GA3
  
• Liferay Portal EE: 6.0, 6.0 SP1, 6.0 SP2, 6.1 GA1, 6.1 GA2, 6.1 GA3, 6.2
  

Bypass Technique:

• Filter Bypass:
  • ////api///////liferay
    
  • ///api///////spring
    
  • Nginx Forwarding Fails:
    /#/../api/liferay
    

PoC Exploit Code:

.......................

[Banuk]

Affected Versions:

• Liferay Portal CE: 7.0 GA3, 7.0.1 GA2, 7.0.2 GA3
  
• Liferay Portal EE: 6.0, 6.0 SP1, 6.0 SP2, 6.1 GA1, 6.1 GA2, 6.1 GA3, 6.2
  

Bypass Technique:

• Filter Bypass:
  • ////api///////liferay
    
  • ///api///////spring
    
  • Nginx Forwarding Fails:
    /#/../api/liferay
    

PoC Exploit Code:

Thanks for sharing...will try this shit out...

[SolitasX]

Affected Versions:

• Liferay Portal CE: 7.0 GA3, 7.0.1 GA2, 7.0.2 GA3
  
• Liferay Portal EE: 6.0, 6.0 SP1, 6.0 SP2, 6.1 GA1, 6.1 GA2, 6.1 GA3, 6.2
  

Bypass Technique:

• Filter Bypass:
  • ////api///////liferay
    
  • ///api///////spring
    
  • Nginx Forwarding Fails:
    /#/../api/liferay
    

PoC Exploit Code:

tttttthanks for your poc

[darkspeed]

Thanks for sharing...will try this shit out...

yeah I found a docker image for liferay 6.1, could be easy for you to build the environment