CVE-2025-62245

CVE-2025-62245CVE-2025-62245

liferay / digital_experience_platform

Description

Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments.

Scoring

CVSS 4.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Last modified2026-10-18
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.