CVE-2016-6517

Critical

Published: 23/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the minifierBundleDir parameter to barebone.jsp.

Risk Assessment

Attackers may gain access to unauthorized system resources, potentially leading to data exposure or system compromise.

Recommendation

It is recommended to upgrade to the latest version of Liferay to mitigate this vulnerability and implement additional security measures against directory traversal attacks.

Original NVD description (English source)

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the minifierBundleDir parameter to barebone.jsp.