Liferay Portal Insecure Default Configuration in auth.login.prompt.enabled

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-41414 · ADVISORY
• liferay/liferay-portal commit 659c442 · WEB
• liferay/liferay-portal · PACKAGE
• liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-01-insecure-defaults-auth-login-prompt-enabled · WEB
• portal.liferay.dev/learn/security/known-vulnerabilities · Not Applicable

com.liferay.portal:com.liferay.portal.impl のその他の脆弱性

• CVE-2025-62276中 5.5The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay D…
• CVE-2025-62261中 6.5Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92…
• CVE-2025-62254高 7.5The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 202…
• CVE-2025-62249中 6.1A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0 through 2025.Q…
• CVE-2025-62252中 4.3Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay…