This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-62276 | BDVDB-2026-300321 Detail

LiferayPortal

Description#

The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions uses an incorrect cache-control header, which allows local users to obtain access to downloaded files via the browser's cache.

Impact#

Per CVSS v4.0: confidentiality impact low, integrity impact low, availability impact none. Attack vector: local.

Weaknesses#

  • CWE-525 Use of Web Browser Cache Containing Sensitive Information

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.