Liferay Portal JSONWS Java Deserialization Vulnerability Remote Code Execution Exploit

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).
Exploit Platform
Exploit Type
Product Name