CVE-2025-62259

Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit access to APIs before a user has verified their email address, which allows remote users to access and edit content via the API.

We have discovered 71 live websites that are affected by CVE-2025-62259.

Run a Free Instant Scan



Affected Software

Product  Liferay
Category Content Management System
Vulnerable Domains71 live websites (2.13% of Liferay install base)
Vulnerable Versions
  • from 7.4 through 7.4.3.109
Vulnerable Versions Count16 versions ( 27% of all versions)


Common Weakness Enumeration

CWE-863 Incorrect Authorization



Details

  • Published - Oct 27, 2025
  • Updated - Oct 28, 2025

Credits

  • 4rth4s (reporter)

Website Distribution by Country

Number of websites using CVE-2025-62259
United States9 websites


Italy13 websites
Spain10 websites
Germany9 websites
Poland7 websites
GB4 websites
Brazil3 websites
Portugal3 websites
France2 websites
Argentina1 websites

Website Distribution by TLD

Number of websites using CVE-2025-62259
.com12 websites
.it10 websites
.es7 websites
.pl7 websites
.de6 websites
.org5 websites
.co.uk4 websites
.net2 websites
.be1 websites
.cz1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-62259

Top websites that are affected by CVE-2025-62259. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.***.it Italy**,***
*****.**.***.br Brazil***,***
***.it Italy***,***
*****.org Singapore***,***
*******.org Spain***,***
******.****.***.it Italy***,***
*****.****.***.it Italy***,***
**************.de Germany***,***
***********.*****.pl Poland***,***
**.**.***.br Brazil***,***
See full domain list

FAQ

CVE-2025-62259 is Incorrect Authorization in Liferay
A total of 71 websites have been identified as vulnerable to CVE-2025-62259, based on global website indexing conducted by WebTechSurvey.
The Liferay is affected by the CVE-2025-62259 vulnerability.
Liferay versions up to and including 7.4.3.109 are vulnerable to CVE-2025-62259.