CVE-2025-62254 | Liferay Portal/DXP ComboServlet path traversal

A vulnerability identified as critical has been detected in Liferay Portal and DXP. This issue affects some unknown processing of the component ComboServlet. Performing manipulation results in path traversal.

This vulnerability is identified as CVE-2025-62254. The attack can be initiated remotely. There is not any exploit available.