{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.84"}],"component":"com.liferay:com.liferay.search.experiences.service","cve_ids":["CVE-2025-62247"],"ecosystem":"Maven","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cqwv-9xh5-25fg","id":"tcs_01M5N8T406PBA80GC98TMP5MN5","modified_at":"2025-10-22T22:42:46.940385Z","published_at":"2025-10-22T21:31:34Z","references":["https://osv.dev/vulnerability/GHSA-cqwv-9xh5-25fg","https://nvd.nist.gov/vuln/detail/CVE-2025-62247","https://github.com/liferay/liferay-portal/commit/019d703943ef58fb7bd3f30fe680c02c2756f86b","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-18297","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62247"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-cqwv-9xh5-25fg","url":"https://osv.dev/vulnerability/GHSA-cqwv-9xh5-25fg"}],"summary":"Liferay Portal and DXP are Missing Authorization in Collection Provider"}