Skip to content
OpenAdvisories

Package · Maven

com.liferay.commerce:com.liferay.commerce.order.content.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2025-62241

    Liferay Commerce Order Content Web is Vulnerable to Authorization Bypass Through User-Controlled Key

    Insecure Direct Object Reference (IDOR) vulnerability with shipment addresses in Liferay DXP 2023.Q4.1 through 2023.Q4.5 allows remote authenticated users to from one virtual instance to view the shipment addresses of different virtual instance via the _com_l…

    Liferay DXP com.liferay.commerce:com.liferay.commerce.order.content.web Maven