{"action":"Upgrade com.liferay:com.liferay.site.navigation.menu.item.asset.vocabulary to 1.0.23 or later.","affected":[{"fixed":"1.0.23","introduced":"0"}],"component":"com.liferay:com.liferay.site.navigation.menu.item.asset.vocabulary","cve_ids":["CVE-2025-62251"],"ecosystem":"Maven","epss":0.00271,"exploited":false,"fixed_versions":["1.0.23"],"ghsa_id":"GHSA-j4f7-gj7q-xg9m","id":"tcs_01M5N91YF64PYDB09VR4Q8HF05","modified_at":"2025-10-16T08:12:47.117177Z","published_at":"2025-10-14T00:31:01Z","references":["https://osv.dev/vulnerability/GHSA-j4f7-gj7q-xg9m","https://nvd.nist.gov/vuln/detail/CVE-2025-62251","https://github.com/liferay/liferay-portal/commit/12bec829da315c21fbc96492ffbdda4c7a2e59cb","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-18236","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62251"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-j4f7-gj7q-xg9m","url":"https://osv.dev/vulnerability/GHSA-j4f7-gj7q-xg9m"},{"source":"nvd","source_id":"CVE-2025-62251","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62251"}],"summary":"Liferay has Incorrect Permission Assignment for Critical Resource"}