{"id":"CVE-2010-5327","aliases":["EUVD-2022-3315","GHSA-97gm-mcv6-cphm"],"status":"published","title":"Shell command injection in Liferay Portal","description":"Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02812,"percentile":0.86619,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2017-01-13T19:00:00Z","modified":"2026-06-16T23:26:34Z","fixes":[{"ecosystem":"Maven","package":"com.liferay.portal:portal-impl","fixed_in":["6.2.11"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"com.liferay.portal:portal-service","fixed_in":["6.2.11"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.liferay.portal:portal-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.liferay.portal:portal-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.11"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.liferay.portal:portal-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.11"}]}],"versions":["5.2.3","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.1.0","6.1.1","6.1.2","6.2.0-B1","6.2.0-B2","6.2.0-B3","6.2.0-M5","6.2.0-M6","6.2.0-RC1","6.2.0-RC2","6.2.0-RC3","6.2.0-RC4","6.2.0-RC5","6.2.0-ga1","6.2.1","6.2.2","6.2.3","6.2.4","6.2.5"]},{"source":"osv","ecosystem":"Maven","package":"com.liferay.portal:portal-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.11"}]}],"versions":["5.2.3","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.1.0","6.1.1","6.1.2","6.2.0-B1","6.2.0-B2","6.2.0-B3","6.2.0-M5","6.2.0-M6","6.2.0-RC1","6.2.0-RC2","6.2.0-RC3","6.2.0-RC4","6.2.0-RC5","6.2.0-ga1","6.2.1","6.2.2","6.2.3","6.2.4","6.2.5"]}],"products":[{"vendor":"liferay","product":"liferay_portal"}],"references":[{"url":"https://issues.liferay.com/browse/LPS-7087","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","web"]},{"url":"https://issues.liferay.com/browse/LPE-14964","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","web"]},{"url":"https://dev.liferay.com/web/community-security-team/known-vulnerabilities","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web"]},{"url":"https://github.com/liferay/liferay-portal/commit/90c4e85a8f8135f069f3f05e4d54a77704769f91","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","web"]},{"url":"https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/lps-64547-remote-code-execution-and-privilege-escalation-in-templates","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web"]},{"url":"https://issues.liferay.com/browse/LPS-64547","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-5327","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-97gm-mcv6-cphm"}],"sources":{"cve":[{"id":"CVE-2010-5327","description":"Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.","status":"published","published":"2017-01-13T19:00:00Z","modified":"2024-08-07T04:17:10.31Z","updated_at":"2026-11-02T14:33:26.665532Z"}],"euvd":[{"id":"EUVD-2022-3315","description":"Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.","status":"published","published":"2017-01-13T19:00:00Z","modified":"2024-08-07T04:17:10Z","updated_at":"2026-11-03T01:39:27.659956Z"}],"ghsa":[{"id":"GHSA-97gm-mcv6-cphm","title":"Shell command injection in Liferay Portal","description":"Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.","status":"published","published":"2022-05-17T03:05:00Z","modified":"2024-01-10T22:39:31Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:37:30.812736Z"}],"nvd":[{"id":"CVE-2010-5327","description":"Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.","status":"published","published":"2017-01-13T19:59:00.137Z","modified":"2026-06-16T23:26:34.013Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:04.520133Z"}],"osv":[{"id":"GHSA-97gm-mcv6-cphm","title":"Shell command injection in Liferay Portal","description":"Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.","status":"published","published":"2022-05-17T03:05:00Z","modified":"2024-12-02T05:48:30.667297Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:43.524801Z"}]}}