Description
This CVE ID is rejected. The reported vulnerability was found to be present only in a feature that was under development and protected by a beta feature flag. As a result, the issue was not exploitable in the official or public releases within the specified affected ranges, making this a false positive for officially released versions.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.liferay:com.liferay.frontend.taglib.clay | < 15.2.1 | 15.2.1 | GHSA-qgj5-4qvg-2f8c |
Advisories 1
- WID-SEC-2025-1990 Liferay Portal: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2025