Liferay Digital Experience Platform (DXP) 7.2 Fix Pack 20
Approved changes feed: RSS · Atom
cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_20:*:*:*:*:*:*
part: a version: 7.2 update: fix_pack_20
| Vendor | Liferay (5231553d-d54f-5cd9-bf56-0bf2ac7f0033) |
|---|---|
| Product | Digital Experience Platform (ff76fa00-2b41-514b-9b5f-2ad7f4e73e64) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3602 |
vulnerable | 2026-06-08 07:23:09.481991 |
Details available
Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix pack 8 through fix pack 20 does not limit the depth of a GraphQL queries, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing complex queries.
Published: 2025-06-16T13:50:04.254Z
Updated: 2025-06-16T14:30:21.750Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.