CVE-2020-15840

MEDIUM · CVSS 5.3 EPSS 1.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-09-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-15840

Severity

MEDIUM

CVSS

5.3

EPSS

1.21%

Original NVD Description

In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.