GHSA-cw79-fq4f-9r96

Source

https://github.com/advisories/GHSA-cw79-fq4f-9r96

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-cw79-fq4f-9r96/GHSA-cw79-fq4f-9r96.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-cw79-fq4f-9r96

Aliases

CVE-2025-62262

Published

2025-10-27T21:30:28Z

Modified

2025-11-15T02:41:24Z

Severity

4.6 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature

Details

Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users to view user email address in the log files.

Database specific

{
    "cwe_ids":  [
        "CWE-532"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-10-29T10:40:09Z",
    "nvd_published_at":  "2025-10-27T21:15:37Z",
    "severity":  "MODERATE"
}

References

Affected packages

Maven / com.liferay:com.liferay.portal.security.ldap.impl

Package

Name: com.liferay:com.liferay.portal.security.ldap.impl; View open source insights on deps.dev
Purl: pkg:maven/com.liferay/com.liferay.portal.security.ldap.impl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.0.2

Fixed

4.0.54

Affected versions

4.*

4.0.2

4.0.3

4.0.4

4.0.5

4.0.6

4.0.7

4.0.8

4.0.9

4.0.10

4.0.11

4.0.12

4.0.13

4.0.14

4.0.15

4.0.16

4.0.17

4.0.18

4.0.19

4.0.20

4.0.21

4.0.22

4.0.23

4.0.24

4.0.25

4.0.26

4.0.27

4.0.28

4.0.29

4.0.30

4.0.31

4.0.32

4.0.33

4.0.34

4.0.35

4.0.36

4.0.37

4.0.38

4.0.39

4.0.40

4.0.41

4.0.42

4.0.43

4.0.44

4.0.45

4.0.46

4.0.47

4.0.48

4.0.49

4.0.50

4.0.51

4.0.52

4.0.53

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-cw79-fq4f-9r96/GHSA-cw79-fq4f-9r96.json"