Skip to main content
← Maven

com.liferay:com.liferay.change.tracking.web

4 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 medium
Registry
Maven Central

Advisories 4

  • CVE-2025-62242Medium 5.3

    Insecure Direct Object Reference (IDOR) vulnerability with account addresses in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP…

    Affected: fixed in 2.0.120.

  • CVE-2025-62243Medium 5.3

    Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0…

    Affected: fixed in 2.0.122.

  • CVE-2025-62244Medium 4.8

    Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.3.1 through 7.4.3.111, and Liferay DXP 2023.Q4.0…

    Affected: fixed in 2.0.122.

  • CVE-2025-62245Medium 5.1

    Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5…

    Affected: from 2.0.9, fixed in 2.0.121.