Information Disclosure Vulnerability in Liferay Portal and DXP

CVE-2025-62251

What is CVE-2025-62251?

A vulnerability exists in Liferay Portal and Liferay DXP that allows unauthorized users to access restricted content through the Menu Display Widget. This issue affects specific versions, potentially exposing sensitive information to individuals without the necessary permissions. It is crucial for organizations using affected versions to apply available security patches to protect against unauthorized information disclosure.

References