diff --git a/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md b/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md index ecf3b48d1c..928c93391e 100644 --- a/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md +++ b/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md @@ -4,7 +4,7 @@ This module exploits a Java unmarshalling vulnerability via JSONWS in Liferay Portal versions < 6.2.5 GA6, 7.0.6 GA7, 7.1.3 GA4, and 7.2.1 GA2 -to execute code as the Liferay user. +to execute code as the Liferay user. Tested against 7.2.0 GA1. ### Setup diff --git a/modules/exploits/multi/http/liferay_java_unmarshalling.rb b/modules/exploits/multi/http/liferay_java_unmarshalling.rb index 19ec89f272..00c437234a 100644 --- a/modules/exploits/multi/http/liferay_java_unmarshalling.rb +++ b/modules/exploits/multi/http/liferay_java_unmarshalling.rb @@ -17,7 +17,7 @@ class MetasploitModule < Msf::Exploit::Remote 'Description' => %q{ This module exploits a Java unmarshalling vulnerability via JSONWS in Liferay Portal versions < 6.2.5 GA6, 7.0.6 GA7, 7.1.3 GA4, and 7.2.1 GA2 - to execute code as the Liferay user. + to execute code as the Liferay user. Tested against 7.2.0 GA1. }, 'Author' => [ 'Markus Wulftange', # Discovery