Description

Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users to view user email address in the log files.

Remediation

References

CVE-2025-62262

Related Vulnerabilities

RubyGems Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-0899)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12639)

Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2024-25610)

Apache HTTP Server Other Vulnerability (CVE-2004-0885)

Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-6970)

Severity

Medium

Classification

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-532 CVE-2025-62262