Maven/com.liferay:com.liferay.search.experiences.service CVE-2025-62247: low
Liferay Portal and DXP are Missing Authorization in Collection Provider
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.84 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cqwv-9xh5-25fg
- https://nvd.nist.gov/vuln/detail/CVE-2025-62247
- https://github.com/liferay/liferay-portal/commit/019d703943ef58fb7bd3f30fe680c02c2756f86b
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-18297
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62247
CVE-2025-62247 · published · modified · JSON