Executive brief
Liferay Portal does not limit the depth of a GraphQL queries
Affected products
- Maven com.liferay:com.liferay.portal.vulcan.impl
Junglewise Threat Intelligence
CVE-2025-3602: Liferay Portal does not limit the depth of a GraphQL queries
CVE-2025-3602 · Severity: medium · CVSS 4 · Published 2025-06-16
Technologies: com.liferay:com.liferay.portal.vulcan.impl (Maven). Vendors: Maven.