Defined in 3 files
Last patched
doServeResource in liferay/liferay-portal was changed by 6 published CVE fixes in 2025, in 7 distinct patches that added or removed 176 lines in total.
The name occurs in 3 files: modules/apps/change-tracking/change-tracking-web/src/main/java/com/liferay/change/tracking/web/internal/portlet/action/UpdateCTCommentMVCResourceCommand.java, modules/apps/dynamic-data-mapping/dynamic-data-mapping-web/src/main/java/com/liferay/dynamic/data/mapping/web/internal/portlet/action/RenderStructureFieldMVCResourceCommand.java, modules/apps/change-tracking/change-tracking-web/src/main/java/com/liferay/change/tracking/web/internal/portlet/action/DeleteCTCommentMVCResourceCommand.java.
liferay/liferay-portal has 160 CVEs with a located fix in total, so 4% of them touched this function.
Every published CVE whose fix changed doServeResource, newest first, with the lines each fix touched.
CVE-2025-62248 · modules/apps/dynamic-data-mapping/dynamic-data-mapping-web/src/main/java/com/liferay/dynamic/data/mapping/web/internal/portlet/action/RenderStructureFieldMVCResourceCommand.java · lines 116–118 · +3 −2
CVE-2025-62242 · modules/apps/change-tracking/change-tracking-web/src/main/java/com/liferay/change/tracking/web/internal/portlet/action/UpdateCTCommentMVCResourceCommand.java · lines 62–136 · +18 −2 in 2 hunks
CVE-2025-62243 · modules/apps/change-tracking/change-tracking-web/src/main/java/com/liferay/change/tracking/web/internal/portlet/action/DeleteCTCommentMVCResourceCommand.java · lines 46–66 · +19 −0
CVE-2025-62243 · modules/apps/change-tracking/change-tracking-web/src/main/java/com/liferay/change/tracking/web/internal/portlet/action/UpdateCTCommentMVCResourceCommand.java · lines 45–109 · +42 −8 in 3 hunks
CVE-2025-62245 · modules/apps/change-tracking/change-tracking-web/src/main/java/com/liferay/change/tracking/web/internal/portlet/action/UpdateCTCommentMVCResourceCommand.java · lines 62–136 · +18 −2 in 2 hunks
CVE-2025-43757 · modules/apps/dynamic-data-mapping/dynamic-data-mapping-web/src/main/java/com/liferay/dynamic/data/mapping/web/internal/portlet/action/RenderStructureFieldMVCResourceCommand.java · line 106 · +1 −1
CVE-2025-43746 · modules/apps/dynamic-data-mapping/dynamic-data-mapping-web/src/main/java/com/liferay/dynamic/data/mapping/web/internal/portlet/action/RenderStructureFieldMVCResourceCommand.java · lines 53–123 · +30 −30 in 2 hunks
Get an alert when the next CVE fix lands in liferay/liferay-portal, with the patched functions.
Monitor liferay-portal CVEsFunctions in the same files that CVE fixes also changed.
Functions in liferay/liferay-portal changed by the most CVE fixes.
Common questions about CVE fixes to doServeResource.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
