System	Score	Found at
cvssv3.1	9.8	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-w7pm-cc4v-f3g8/GHSA-w7pm-cc4v-f3g8.json
cvssv4	9.3	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-w7pm-cc4v-f3g8/GHSA-w7pm-cc4v-f3g8.json
generic_textual	CRITICAL

Reference id	Reference type	URL
		http://packetstormsecurity.com/files/157254/Liferay-Portal-Java-Unmarshalling-Remote-Code-Execution.html
		http://packetstormsecurity.com/files/158392/Liferay-Portal-Remote-Code-Execution.html
		https://github.com/liferay/liferay-portal
		https://github.com/liferay/liferay-portal/blob/7.2.1-ga2/portal-kernel/bnd.bnd
		https://portal.liferay.dev/learn/security/known-vulnerabilities
		https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/117954271
		https://research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet
		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-7961
CVE-2020-7961		https://nvd.nist.gov/vuln/detail/CVE-2020-7961

Data source	Exploit-DB
Date added	April 16, 2020
Description	Liferay Portal - Java Unmarshalling via JSONWS RCE (Metasploit)
Ransomware campaign use	Known
Source publication date	April 16, 2020
Exploit type	remote
Platform	java
Source update date	April 16, 2020
Source URL	https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/liferay_java_unmarshalling.rb

Data source	Metasploit
Description	This module exploits a Java unmarshalling vulnerability via JSONWS in Liferay Portal versions < 6.2.5 GA6, 7.0.6 GA7, 7.1.3 GA4, and 7.2.1 GA2 to execute code as the Liferay user. Tested against 7.2.0 GA1.
Note	Stability: - crash-safe Reliability: - repeatable-session SideEffects: - ioc-in-logs - artifacts-on-disk
Ransomware campaign use	Unknown
Source publication date	Nov. 25, 2019
Platform	Java
Source URL	https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/liferay_java_unmarshalling.rb

Data source	KEV
Date added	Nov. 3, 2021
Description	Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.
Required action	Apply updates per vendor instructions.
Due date	May 3, 2022
Note	https://nvd.nist.gov/vuln/detail/CVE-2020-7961
Ransomware campaign use	Unknown

No EPSS data available for this advisory.

Patch URL
There are no known patches.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-w7pm-cc4v-f3g8/GHSA-w7pm-cc4v-f3g8.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-w7pm-cc4v-f3g8/GHSA-w7pm-cc4v-f3g8.json

Attack Vector (AV)	Attack Complexity (AC)	Attack Requirements (AT)	Privileges Required (PR)	User Interaction (UI)	Vulnerable System Impact Confidentiality (VC)	Vulnerable System Impact Integrity (VI)	Vulnerable System Impact Availability (VA)	Subsequent System Impact Confidentiality (SC)	Subsequent System Impact Integrity (SI)	Subsequent System Impact Availability (SA)
network adjacent local physical	low high	none present	none low high	none passive active	high low none	high low none	high low none	high low none	high low none	high low none