References https://nvd.nist.gov/vuln/detail/CVE-2025-4604 https://www.cve.org/CVERecord?id=CVE-2025-4604 https://liferay.dev/w/cve-2025-4604 https://github.com/advisories/GHSA-3j6h-5v68-hvqg https://www.miggo.io/vulnerability-database/cve/CVE-2025-4604 https://dbugs.ptsecurity.com/vulnerability/PT-2025-31872 https://advisories.gitlab.com/pkg/maven/com.liferay/com.liferay.captcha.impl/CVE-2025-4604/ https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-4604 https://www.tenable.com/plugins/nessus/245205 https://cve.imfht.com/detail/CVE-2025-4604?lang=en
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞Versa Concerto /portalapi/v1/roles/option 权限绕过漏洞(CVE-2025-34027)TRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)WIFISKY 7层流控路由器 /portal/ibilling/index.php 命令执行漏洞大华智慧园区综合管理平台 /portal/itc/attachment_downloadByUrlAtt.action 文件读取漏洞HIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞PoCCVE-2025-4576: Liferay Portal & DXP - Cross-Site ScriptingLiferay Portal/DXP存在XSS漏洞(CVE-2025-4576)PoCTRUfusion Enterprise /trufusionPortal/getCobrandingData 文件读取漏洞(CVE-2025-27222)PoC用友 NC /portal/pt/portalpage/importPml XML 外部实体注入漏洞PoC用友 NC /portal/pt/oacoSchedulerEvents/deleteEvent SQL 注入漏洞PoC用友 NC /portal/pt/servlet/workflowImageServlet/doPost SQL 注入漏洞