Executive brief
Liferay Portal Stores Password Reset Tokens in Plain Text
Affected products
- Maven com.liferay.portal:com.liferay.portal.impl
- Maven com.liferay.portal:release.portal.bom
Junglewise Threat Intelligence
CVE-2025-62261: Liferay Portal Stores Password Reset Tokens in Plain Text
CVE-2025-62261 · Severity: medium · CVSS 4 · Published 2025-10-28
Technologies: com.liferay.portal:com.liferay.portal.impl (Maven), com.liferay.portal:release.portal.bom (Maven). Vendors: Maven.