PT-2025-44693 · Liferay · Liferay Portal+1

Published

2025-10-31

·

Updated

2025-11-15

·

CVE-2025-62276

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.111 Liferay DXP versions 2023.Q3.1 through 2023.Q4.10 Liferay Portal 7.4 GA through update 92
Description The Document Library and Adaptive Media modules are affected by an issue where an incorrect cache-control header is used. This can allow local users to access downloaded files through the browser's cache.
Recommendations Liferay Portal versions 7.4.0 through 7.4.3.111 should be updated. Liferay DXP versions 2023.Q3.1 through 2023.Q4.10 should be updated. Liferay Portal 7.4 GA through update 92 should be updated.

Fix

Weakness Enumeration

CWE-525

Related Identifiers

CVE-2025-62276
GHSA-6533-FHR2-F38H

Affected Products

Liferay Dxp
Liferay Portal