From c9c3f872033fde89e28e4ec615367cc1fb9af192 Mon Sep 17 00:00:00 2001 From: William Vu Date: Tue, 14 Apr 2020 14:00:13 -0500 Subject: [PATCH] Note tested version in module --- .../modules/exploit/multi/http/liferay_java_unmarshalling.md | 2 +- modules/exploits/multi/http/liferay_java_unmarshalling.rb | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md b/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md index ecf3b48d1c..928c93391e 100644 --- a/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md +++ b/documentation/modules/exploit/multi/http/liferay_java_unmarshalling.md @@ -4,7 +4,7 @@ This module exploits a Java unmarshalling vulnerability via JSONWS in Liferay Portal versions < 6.2.5 GA6, 7.0.6 GA7, 7.1.3 GA4, and 7.2.1 GA2 -to execute code as the Liferay user. +to execute code as the Liferay user. Tested against 7.2.0 GA1. ### Setup diff --git a/modules/exploits/multi/http/liferay_java_unmarshalling.rb b/modules/exploits/multi/http/liferay_java_unmarshalling.rb index 19ec89f272..00c437234a 100644 --- a/modules/exploits/multi/http/liferay_java_unmarshalling.rb +++ b/modules/exploits/multi/http/liferay_java_unmarshalling.rb @@ -17,7 +17,7 @@ class MetasploitModule < Msf::Exploit::Remote 'Description' => %q{ This module exploits a Java unmarshalling vulnerability via JSONWS in Liferay Portal versions < 6.2.5 GA6, 7.0.6 GA7, 7.1.3 GA4, and 7.2.1 GA2 - to execute code as the Liferay user. + to execute code as the Liferay user. Tested against 7.2.0 GA1. }, 'Author' => [ 'Markus Wulftange', # Discovery