Description

The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.

Remediation

References

CVE-2020-24554

Related Vulnerabilities

MySQL CVE-2012-1703 Vulnerability (CVE-2012-1703)

Joomla! Core 2.5.0 Information Disclosure (2.5.0)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22150)

PHP Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2007-0455)

WordPress Plugin Client Invoicing by Sprout Invoices-Easy Estimates and Invoices for WordPress Cross-Site Scripting (6.1)

Severity

High

Classification

CVE-2020-24554 CWE-601

Tags

Missing Update Known Vulnerabilities