Threats tagged 'ghsa-xf7m-v66q-76w8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2025-62275Com.liferay:com.liferay.blogs.item.selector.web: Liferay Portal and DXP do not check permissions of images in a blog Medium6.92025-11-01GCVE DatabaseCVE-2025-62275 Liferay Portal and DXP versions prior to 6.0.19 do not properly check permissions for images embedded in blog entries. This flaw allows remote attackers to access images via crafted URLs without authorization. The vulnerability affects multiple versions including Liferay Portal 7.4.0 through 7.4.3.111 and Liferay DXP 2023.Q3 and Q4 releases up to specified updates. A fix is available in version 6.0.19. Report on CVE-2025-62275 Vulnerability CWE-863 #ghsa-xf7m-v66q-76w8 #maven	GCVE Database	2025-11-01

Page 1 of 1