CVE-2025-62243 is an authorization vulnerability classified under CWE-863 affecting Liferay Portal versions 7.4.1 through 7.4.3.112 and multiple Liferay DXP 2023 releases. The flaw arises from improper permission checks on the Publications component, specifically through the _com_liferay_change_tracking_web_portlet_PublicationsPortlet_value parameter. This parameter can be manipulated by remote authenticated attackers to bypass authorization controls, enabling them to view and edit publication comments that they should not have access to. The vulnerability is a form of insecure direct object reference (IDOR), where the application fails to verify that the requesting user is authorized to access or modify the targeted resource. Exploitation requires the attacker to be authenticated but does not require user interaction or elevated privileges beyond standard authenticated user status. The attack vector is network-based with low complexity, and the impact affects confidentiality and integrity by exposing and allowing modification of publication comments. No known exploits have been reported in the wild, and no official patches have been published at the time of disclosure. The vulnerability affects a widely used enterprise portal platform, which is often deployed in corporate intranets and public-facing portals, making it a significant concern for organizations relying on Liferay for content management and collaboration.

For European organizations, this vulnerability poses a risk of unauthorized disclosure and modification of publication comments within Liferay Portal environments. Such unauthorized access could lead to leakage of sensitive internal communications or misinformation if comments are altered maliciously. This can undermine trust in corporate communications, damage reputations, and potentially expose organizations to compliance violations under data protection regulations like GDPR if personal or sensitive data is involved. Since Liferay Portal is commonly used by government agencies, educational institutions, and large enterprises across Europe, exploitation could disrupt internal workflows and collaboration. The medium severity rating reflects that while the vulnerability requires authentication, the ease of exploitation and the scope of affected versions make it a credible threat. The absence of known exploits suggests a window for proactive mitigation before widespread attacks occur.

Organizations should immediately audit their Liferay Portal deployments to identify affected versions and restrict access to the Publications portlet to trusted users only. Implement strict role-based access controls (RBAC) to limit who can view or edit publication comments. Monitor logs for unusual authenticated user activity related to publication comments, especially access patterns involving the _com_liferay_change_tracking_web_portlet_PublicationsPortlet_value parameter. Prepare to deploy vendor patches as soon as they become available; in the meantime, consider disabling or isolating the Publications component if feasible. Conduct user awareness training to ensure users understand the importance of safeguarding their credentials, as exploitation requires authentication. Additionally, review and harden authentication mechanisms to prevent credential compromise. Employ web application firewalls (WAFs) with custom rules to detect and block suspicious requests targeting the vulnerable parameter. Regularly update and patch Liferay Portal and related components to minimize exposure to similar vulnerabilities.