CVE Intelligence

Vulnerabilidades do Maven Com.liferay:com.liferay.comment.web

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Maven Com.liferay:com.liferay.comment.web: 1 registro(s), com versões afetadas e correções.

CVE-2025-43789 Média · 5.3 CWE-863 12/09/2025
Liferay Portal JSON Web Services Direct Class Invocation Enables Service Access Policy Execution
JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSGi are registered and invoked directly as classes which allows Service Access Policies get executed.