CVE-2025-62249

Maven/com.liferay.portal:com.liferay.portal.impl CVE-2025-62249: medium, EPSS 0.25%

Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-rx48-gqc2-4w47
• https://nvd.nist.gov/vuln/detail/CVE-2025-62249
• https://github.com/liferay/liferay-portal/commit/66c51e026f7c9eee8f82137a586ceea5bdc081a5
• https://github.com/liferay/liferay-portal/commit/8309d01f151124e1af392b67baf9711e46488791
• https://github.com/liferay/liferay-portal/commit/f041e7058929618bb101b8e4bae5a8a226e6f8b8
• https://github.com/liferay/liferay-portal
• https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62249

CVE-2025-62249 · published 2025-10-21T21:33:41Z · modified 2025-10-22T19:12:55.025656Z · JSON