{"action":"Upgrade com.liferay:com.liferay.portal.security.auth.verifier to 6.0.26 or later.","affected":[{"fixed":"6.0.26","introduced":"0"}],"component":"com.liferay:com.liferay.portal.security.auth.verifier","cve_ids":["CVE-2025-62256"],"ecosystem":"Maven","epss":0.00402,"exploited":false,"fixed_versions":["6.0.26"],"ghsa_id":"GHSA-j82q-c85j-xw4w","id":"tcs_01M5N92CFA4YK40YS875V240VP","modified_at":"2025-11-15T02:41:52.724502Z","published_at":"2025-10-23T15:30:34Z","references":["https://osv.dev/vulnerability/GHSA-j82q-c85j-xw4w","https://nvd.nist.gov/vuln/detail/CVE-2025-62256","https://github.com/liferay/liferay-portal/commit/1ec03c02f2e0ecfdf4101c1a7ade5353767e62e3","https://github.com/liferay/liferay-portal/commit/27b51dbae35bd6e4b415fb33ecf14b2144b5038f","https://github.com/liferay/liferay-portal/commit/bc6138ce1be22babbd90dc2190f4dbe91c039334","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-17884","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62256"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-j82q-c85j-xw4w","url":"https://osv.dev/vulnerability/GHSA-j82q-c85j-xw4w"}],"summary":"Liferay Portal and DXP do not properly restrict access to OpenAPI"}