Liferay security issue 2237

[Aritz Galdos, modificado 14 Anos atrás.]

Hi folks!!

We got an alert from one of our clients refering to a Liferay security alert LEP-2237. I could not find info about that.

Which versions are concerned?

As I see, they got a patch which contais just the file "PortletRequestProcessor.class" (in its corresponding classpath).

Could anyone spot some light on this?


Feel good to be back!!

[Michael C. Han, modificado 14 Anos atrás.]

The issue is LPE-2237 and refers to 5.1 and 5.2 EE releases. EE patches were provided to EE subscription customers in the customer portal. The security notice was sent out to EE customers a few days ago.

The community can download a hot patch for 5.1.2 and 5.2.3 (the last CE release for 5.1 and 5.2 respectively) for the related LPS-8374.

[Aritz Galdos, modificado 14 Anos atrás.]

Thanks a lot for your reply Michael!