5.5

CVE-2025-62276

The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions uses an incorrect cache-control header, which allows local users to obtain access to downloaded files via the browser's cache.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Liferay ≫ Digital Experience Platform Version2023.q3.1
Liferay ≫ Digital Experience Platform Version2023.q3.2
Liferay ≫ Digital Experience Platform Version2023.q3.3
Liferay ≫ Digital Experience Platform Version2023.q3.4
Liferay ≫ Digital Experience Platform Version2023.q3.5
Liferay ≫ Digital Experience Platform Version2023.q3.6
Liferay ≫ Digital Experience Platform Version2023.q3.7
Liferay ≫ Digital Experience Platform Version2023.q3.8
Liferay ≫ Digital Experience Platform Version2023.q3.9
Liferay ≫ Digital Experience Platform Version2023.q3.10
Liferay ≫ Digital Experience Platform Version2023.q4.0
Liferay ≫ Digital Experience Platform Version2023.q4.1
Liferay ≫ Digital Experience Platform Version2023.q4.2
Liferay ≫ Digital Experience Platform Version2023.q4.3
Liferay ≫ Digital Experience Platform Version2023.q4.4
Liferay ≫ Digital Experience Platform Version2023.q4.5
Liferay ≫ Digital Experience Platform Version2023.q4.6
Liferay ≫ Digital Experience Platform Version2023.q4.7
Liferay ≫ Digital Experience Platform Version2023.q4.8
Liferay ≫ Digital Experience Platform Version2023.q4.9
Liferay ≫ Digital Experience Platform Version2023.q4.10
Liferay ≫ Liferay Portal Version >= 7.4.0 < 7.4.3.112
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
security@liferay.com 4.6 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-525 Use of Web Browser Cache Containing Sensitive Information

The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.