Liferay Portal is vulnerable to DNS rebinding attacks

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-62266 · ADVISORY
• liferay/liferay-portal · PACKAGE
• liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62256 · WEB
• liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62257 · WEB

com.liferay.portal:release.portal.bom のその他の脆弱性

• CVE-2025-62264中 6.1Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q…
• CVE-2025-62265中 5.4Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and …
• CVE-2025-62257中 5.3Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 thro…
• CVE-2025-62259中 5.4Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 9…
• CVE-2025-62258中 6.5CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through up…