CVE-2025-62254
1 advisory.
Maven/com.liferay.portal:com.liferay.portal.impl CVE-2025-62254: high 7.5, EPSS 0.55%
Liferay Portal ComboServlet denial of service via large file combination
Action: Upgrade com.liferay.portal:com.liferay.portal.impl to 97.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 97.0.0 | - |
Fixed versions
| 97.0.0 |
Sources
- osv: GHSA-q95h-87j6-273x
- https://nvd.nist.gov/vuln/detail/CVE-2025-62254
- https://github.com/liferay/liferay-portal/commit/45e1a3a757bc38f7b9f8034909e90f1a56f160a5
- https://github.com/liferay/liferay-portal/commit/8328aaf7c6ebb3f76c7982256e028caeb48fb664
- https://github.com/liferay/liferay-portal/commit/85d63e9d6e47e11074046cc4459d3b1ab3370536
- https://github.com/liferay/liferay-portal/commit/def502837297d155ec2fd61044288e75230dd235
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-17867
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62254
CVE-2025-62254 · published · modified · JSON