{"action":"Upgrade com.liferay:com.liferay.blogs.item.selector.web to 6.0.19 or later.","affected":[{"fixed":"6.0.19","introduced":"0"}],"component":"com.liferay:com.liferay.blogs.item.selector.web","cve_ids":["CVE-2025-62275"],"ecosystem":"Maven","epss":0.0029,"exploited":false,"fixed_versions":["6.0.19"],"ghsa_id":"GHSA-xf7m-v66q-76w8","id":"tcs_01M5N9J6E51WECX9A1GT3QKW8T","modified_at":"2025-11-15T02:58:02.333858Z","published_at":"2025-11-01T03:30:24Z","references":["https://osv.dev/vulnerability/GHSA-xf7m-v66q-76w8","https://nvd.nist.gov/vuln/detail/CVE-2025-62275","https://github.com/liferay/liferay-portal/commit/9856c55bcbb3b8ce1276117709b9c0082a19c62c","https://github.com/liferay/liferay-portal/commit/e0ae29cfdb8d10a6fddc56d04ca3ae88c3fbc7f3","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-17948","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62275"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xf7m-v66q-76w8","url":"https://osv.dev/vulnerability/GHSA-xf7m-v66q-76w8"}],"summary":"Liferay Portal and DXP do not check permissions of images in a blog entry"}