{ "id": "CVE-2021-33990", "sourceIdentifier": "cve@mitre.org", "published": "2023-04-16T04:15:07.967", "lastModified": "2023-04-17T13:12:43.170", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists." } ], "metrics": {}, "references": [ { "url": "http://packetstormsecurity.com/files/171701/Liferay-Portal-6.2.5-Insecure-Permissions.html", "source": "cve@mitre.org" }, { "url": "https://github.com/fu2x2000/Liferay_exploit_Poc", "source": "cve@mitre.org" } ] }