CVE-2025-62262
NoneLiferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature
CVSS
—
EPSS
0.1%
Published
Oct 27, 2025
CISA due date
—
The record
Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users to view user email address in the log files.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | com.liferay:com.liferay.portal.security.ldap.impl | 4.0.2 | 4.0.54 |
| maven | com.liferay/com.liferay.portal.security.ldap.impl | 4.0.2 | 4.0.54 |
Related vulnerabilities
- GHSA-cw79-fq4f-9r96 Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in… Same vulnerability
- CVE-2026-16648 Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log… CWE-532
- CVE-2026-104872 OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting… CWE-532
- CVE-2026-81870 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-532
- CVE-2026-87993 The consul-template library is vulnerable to an information disclosure issue in its error… CWE-532
- CVE-2026-80169 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532
- CVE-2026-79966 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532
- CVE-2026-86597 Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC… CWE-532