{"action":"Upgrade com.liferay.portal:com.liferay.portal.impl to 97.0.0 or later.","affected":[{"fixed":"97.0.0","introduced":"0"}],"component":"com.liferay.portal:com.liferay.portal.impl","cve_ids":["CVE-2025-62254"],"ecosystem":"Maven","epss":0.00553,"exploited":false,"fixed_versions":["97.0.0"],"ghsa_id":"GHSA-q95h-87j6-273x","id":"tcs_01M5N994X3MNY6J1TKM6P8HDGX","modified_at":"2025-11-15T02:57:13.670867Z","published_at":"2025-10-24T00:30:53Z","references":["https://osv.dev/vulnerability/GHSA-q95h-87j6-273x","https://nvd.nist.gov/vuln/detail/CVE-2025-62254","https://github.com/liferay/liferay-portal/commit/45e1a3a757bc38f7b9f8034909e90f1a56f160a5","https://github.com/liferay/liferay-portal/commit/8328aaf7c6ebb3f76c7982256e028caeb48fb664","https://github.com/liferay/liferay-portal/commit/85d63e9d6e47e11074046cc4459d3b1ab3370536","https://github.com/liferay/liferay-portal/commit/def502837297d155ec2fd61044288e75230dd235","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-17867","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62254"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q95h-87j6-273x","url":"https://osv.dev/vulnerability/GHSA-q95h-87j6-273x"}],"summary":"Liferay Portal ComboServlet denial of service via large file combination"}