EIP-2026-102393

This exploit demonstrates a Blind Server-Side Request Forgery (SSRF) vulnerability in Liferay Portal versions <= 7.0.4. The PoC sends a crafted XML-RPC pingback request to trigger an SSRF, allowing an attacker to make arbitrary HTTP requests from the server.