Information Disclosure Vulnerability in Liferay Portal and DXP

CVE-2025-62251

What is CVE-2025-62251?

A vulnerability exists in Liferay Portal and Liferay DXP that allows unauthorized users to access restricted content through the Menu Display Widget. This issue affects specific versions, potentially exposing sensitive information to individuals without the necessary permissions. It is crucial for organizations using affected versions to apply available security patches to protect against unauthorized information disclosure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References