Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2025-62276
Good to know:
Date: October 31, 2025
The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions uses an incorrect cache-control header, which allows local users to obtain access to downloaded files via the browser's cache.
Severity Score
Related Resources (7)
Severity Score
Weakness Type (CWE)
Use of Web Browser Cache Containing Sensitive Information
CWE-525Top Fix
Upgrade Version
Upgrade to version com.liferay:com.liferay.adaptive.media.web:5.0.52;com.liferay.portal:com.liferay.portal.impl:69.1.0;https://github.com/liferay/liferay-portal.git - 7.4.3.66-ga66
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | LOCAL |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | REQUIRED |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | LOW |
| Availability (A): | NONE |