CVE-2025-62242 | Liferay Portal/DXP AAccount Address authorization

October 13, 2025 Yanac

A vulnerability classified as problematic was found in Liferay Portal and DXP. This affects an unknown part of the component AAccount Address Handler. Executing manipulation of the argument _com_liferay_account_admin_web_internal_portlet_AccountEntriesAdminPortlet_addressId can lead to authorization bypass.

This vulnerability is tracked as CVE-2025-62242. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More