Errors Suggesting a Search Bot Attack
How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!
While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.
Legacy Article
You are viewing an article from our legacy "FastTrack"
publication program, made available for informational purposes. Articles
in this program were published without a requirement for independent
editing or verification and are provided"as is" without
guarantee.
Before using any information from this article, independently verify its
suitability for your situation and project.
Issue
- We are seeing many abnormal errors in our Liferay catalina logs all of sudden. We have tried restarting, but the errors continue. What could these mean?
ERROR [ajp-nio-0.0.0.0-8009-exec-19][MVCPortlet:557] ${@print(md5(31337))}\ is not a valid include
ERROR [ajp-nio-0.0.0.0-8009-exec-33][MVCPortlet:557] bxss.me is not a valid include
ERROR [ajp-nio-0.0.0.0-8009-exec-11][MVCPortlet:557] '"() is not a valid include
ERROR [ajp-nio-0.0.0.0-8009-exec-27][IncludeTag:74] Current URL website./../../../..
generates exception: java.lang.RuntimeException: org.apache.jasper.JasperException: PWC6345:
There is an error in invoking javac. A full JDK (not just JRE) is required
at org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:92)
at org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:378)
at org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:119)
at com.liferay.portal.osgi.web.servlet.jsp.compiler.internal.JspCompiler.compile
ERROR [ajp-nio-0.0.0.0-8009-exec-14][renderportletjsp:77] null
java.lang.NumberFormatException: For input string: "file:///etc/passwd"
at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65)
at java.lang.Integer.parseInt(Integer.java:580)
at java.lang.Integer.valueOf(Integer.java:766)
at java.util.Optional.map(Optional.java:215)
at com.liferay.portal.search.web.internal.search.results.portlet.shared.search
ERROR [ajp-nio-0.0.0.0-8009-exec-18][ElasticsearchIndexSearcher:165]
java.lang.IllegalArgumentException: Invalid start -20
java.lang.IllegalArgumentException: Invalid start -20
at com.liferay.portal.search.elasticsearch7.internal.ElasticsearchIndexSearcher
search(ElasticsearchIndexSearcher.java:105)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
Environment
- DXP 7.0 | DXP 7.1 | DXP 7.2 | DXP 7.3 | DXP 7.4
Resolution
- It appears that some kind of bot is trying to run attacks in your search bars using known security penetration scripts. This is what is causing errors since they are not valid searches. And based on these specific logs, none of the attacks appear to be successful fortunately. However, you should contact your security team immediately about this to verify this attack being run on your website so they can block it.
Did this article resolve your issue ?