CVE-2025-62275

Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions does not check permission of images in a blog entry, which allows remote attackers to view the images in a blog entry via crafted URL.

We have discovered 71 live websites that are affected by CVE-2025-62275.

Run a Free Instant Scan



Affected Software

Product  Liferay
Category Content Management System
Vulnerable Domains71 live websites (2.13% of Liferay install base)
Vulnerable Versions
  • from 7.4 through 7.4.3.111
Vulnerable Versions Count16 versions ( 27% of all versions)


Common Weakness Enumeration

CWE-863 Incorrect Authorization



Details

  • Published - Nov 1, 2025
  • Updated - Nov 3, 2025

Website Distribution by Country

Number of websites using CVE-2025-62275
United States9 websites


Italy13 websites
Spain10 websites
Germany9 websites
Poland7 websites
GB4 websites
Brazil3 websites
Portugal3 websites
France2 websites
Argentina1 websites

Website Distribution by TLD

Number of websites using CVE-2025-62275
.com12 websites
.it10 websites
.es7 websites
.pl7 websites
.de6 websites
.org5 websites
.co.uk4 websites
.net2 websites
.be1 websites
.cz1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-62275

Top websites that are affected by CVE-2025-62275. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.***.it Italy**,***
*****.**.***.br Brazil***,***
***.it Italy***,***
*****.org Singapore***,***
*******.org Spain***,***
******.****.***.it Italy***,***
*****.****.***.it Italy***,***
**************.de Germany***,***
***********.*****.pl Poland***,***
**.**.***.br Brazil***,***
See full domain list

FAQ

CVE-2025-62275 is Incorrect Authorization in Liferay
A total of 71 websites have been identified as vulnerable to CVE-2025-62275, based on global website indexing conducted by WebTechSurvey.
The Liferay is affected by the CVE-2025-62275 vulnerability.
Liferay versions up to and including 7.4.3.111 are vulnerable to CVE-2025-62275.