CVE-2025-62244

Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.3.1 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92, and 7.3 GA through update 36 allows remote authenticated attackers to view the edit page of a publication via the _com_liferay_change_tracking_web_portlet_PublicationsPortlet_ctCollectionId parameter.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62244	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:liferay:digital_experience_platform::::::::
	cpe:2.3:a:liferay:digital_experience_platform::::::::
	cpe:2.3:a:liferay:digital_experience_platform:7.3:::::::*
	cpe:2.3:a:liferay:digital_experience_platform:7.4:::::::*
	cpe:2.3:a:liferay:liferay_portal::::::::

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de referencia directa a objeto insegura (IDOR) en Publicaciones en Liferay Portal 7.3.1 hasta 7.4.3.111, y Liferay DXP 2023.Q4.0 hasta 2023.Q4.5, 2023.Q3.1 hasta 2023.Q3.8, y 7.4 GA hasta la actualización 92, y 7.3 GA hasta la actualización 36 permite a atacantes remotos autenticados ver la página de edición de una publicación a través del parámetro _com_liferay_change_tracking_web_portlet_PublicationsPortlet_ctCollectionId.

Information

Published : 2025-10-13 17:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-62244

Mitre link : CVE-2025-62244

CVE.ORG link : CVE-2025-62244

JSON object : View

Products Affected

liferay

liferay_portal
digital_experience_platform

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2025-62244", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62244", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T15:05:52.583651Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "security@liferay.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 4.8, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@liferay.com", "affectedData": [{"vendor": "Liferay", "product": "Portal", "versions": [{"status": "affected", "version": "7.3.1", "versionType": "maven", "lessThanOrEqual": "7.4.3.111"}], "defaultStatus": "unaffected"}, {"vendor": "Liferay", "product": "DXP", "versions": [{"status": "affected", "version": "7.3.10", "versionType": "maven", "lessThanOrEqual": "7.3.10-u36"}, {"status": "affected", "version": "7.4.13", "versionType": "maven", "lessThanOrEqual": "7.4.13-u92"}, {"status": "affected", "version": "2023.Q3.1", "versionType": "maven", "lessThanOrEqual": "2023.Q3.8"}, {"status": "affected", "version": "2023.Q4.0", "versionType": "maven", "lessThanOrEqual": "2023.Q4.5"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-13T17:15:34.900", "references": [{"url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62244", "tags": ["Vendor Advisory"], "source": "security@liferay.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@liferay.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.3.1 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92, and 7.3 GA through update 36 allows remote authenticated attackers to view the edit page of a publication via the _com_liferay_change_tracking_web_portlet_PublicationsPortlet_ctCollectionId parameter."}, {"lang": "es", "value": "Vulnerabilidad de referencia directa a objeto insegura (IDOR) en Publicaciones en Liferay Portal 7.3.1 hasta 7.4.3.111, y Liferay DXP 2023.Q4.0 hasta 2023.Q4.5, 2023.Q3.1 hasta 2023.Q3.8, y 7.4 GA hasta la actualizaci\u00f3n 92, y 7.3 GA hasta la actualizaci\u00f3n 36 permite a atacantes remotos autenticados ver la p\u00e1gina de edici\u00f3n de una publicaci\u00f3n a trav\u00e9s del par\u00e1metro _com_liferay_change_tracking_web_portlet_PublicationsPortlet_ctCollectionId."}], "lastModified": "2026-10-18T21:10:00.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3ED7CF1-6D8A-40F7-A009-F3A800F955BD", "versionEndExcluding": "2023.q3.9", "versionStartIncluding": "2023.q3.1"}, {"criteria": "cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C41E249-91C4-4B2D-A8D2-C953A463E14F", "versionEndExcluding": "2023.q4.6", "versionStartIncluding": "2023.q4.0"}, {"criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "324106E0-0AA8-42EB-80C7-21AC59ECDC57"}, {"criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E19E344-92B4-4B46-BD89-25EC7191972C"}, {"criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB31ED9C-996C-4073-AFAA-363E23C98772", "versionEndExcluding": "7.4.3.112", "versionStartIncluding": "7.3.1"}], "operator": "OR"}]}], "sourceIdentifier": "security@liferay.com"}