Orta CVSS 5.3
CVE-2025-62275: Digital Experience Platform: hatalı yetkilendirme
Açıklama (NVD)
Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions does not check permission of images in a blog entry, which allows remote attackers to view the images in a blog entry via crafted URL.
Özet bilgiler
- Ürün
- Liferay Digital Experience Platform
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS v4.0
- 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS
- %0,29 (yüzdelik 22)
- CWE
- CWE-863
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| liferay-digital-experience-platform | 7.4 | 7.4 | — |
| liferay-digital-experience-platform | 2023.q3.1 | 2023.q3.1 | — |
| liferay-digital-experience-platform | 2023.q3.2 | 2023.q3.2 | — |
| liferay-digital-experience-platform | 2023.q3.3 | 2023.q3.3 | — |
| liferay-digital-experience-platform | 2023.q3.4 | 2023.q3.4 | — |
| liferay-digital-experience-platform | 2023.q3.5 | 2023.q3.5 | — |
| liferay-digital-experience-platform | 2023.q3.6 | 2023.q3.6 | — |
| liferay-digital-experience-platform | 2023.q3.7 | 2023.q3.7 | — |
| liferay-digital-experience-platform | 2023.q3.8 | 2023.q3.8 | — |
| liferay-digital-experience-platform | 2023.q3.9 | 2023.q3.9 | — |
| liferay-digital-experience-platform | 2023.q3.10 | 2023.q3.10 | — |
| liferay-digital-experience-platform | 2023.q4.0 | 2023.q4.0 | — |
| liferay-digital-experience-platform | 2023.q4.1 | 2023.q4.1 | — |
| liferay-digital-experience-platform | 2023.q4.2 | 2023.q4.2 | — |
| liferay-digital-experience-platform | 2023.q4.3 | 2023.q4.3 | — |
| liferay-digital-experience-platform | 2023.q4.4 | 2023.q4.4 | — |
| liferay-digital-experience-platform | 2023.q4.5 | 2023.q4.5 | — |
| liferay-digital-experience-platform | 2023.q4.6 | 2023.q4.6 | — |
| liferay-digital-experience-platform | 2023.q4.7 | 2023.q4.7 | — |
| liferay-digital-experience-platform | 2023.q4.8 | 2023.q4.8 | — |
| liferay-digital-experience-platform | 2023.q4.9 | 2023.q4.9 | — |
| liferay-digital-experience-platform | 2023.q4.10 | 2023.q4.10 | — |
| liferay-liferay-portal | 7.4.0 | — | 7.4.3.112 |