Threats tagged 'ghsa-fhcw-px4q-pmvv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2025-62241Com.liferay.commerce:com.liferay.commerce.order.content.web: Liferay Commerce Order Content Web is Vulnerable to Medium5.32025-10-13GCVE DatabaseCVE-2025-62241 Liferay Commerce Order Content Web versions prior to 4.0.114 contain an Insecure Direct Object Reference (IDOR) vulnerability that allows remote authenticated users to view shipment addresses across different virtual instances by manipulating a specific parameter. This vulnerability affects versions 2023.Q4.1 through 2023.Q4.5 and is fixed in version 4.0.114. Report on CVE-2025-62241 Vulnerability CWE-639 #ghsa-fhcw-px4q-pmvv #maven	GCVE Database	2025-10-13

Page 1 of 1