Issue A reflected cross-site scripting (XSS) vulnerability (CVE-2025-4388) in /o/marketplace-app-manager-web/icon.jsp allows a remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web module. Environment 2024.Q1.8 Resolution...

Issue The language selector in Liferay DXP uses the /c/portal/update_language URL, which calls the UpdateLanguageAction.java action. This action sets the selected language and redirects the user to the translated page with a 302 response. This extra HTTP request adds overhead and might...

Issue When modifying the Email Sender Name in our PROD environment by following these steps: Control Panel > Instance Settings > Email Access "Email Sender" in the left menu Set "XYZ" in the "Name" field > Save the change doesn't save successfully. Despite receiving a success message,...

Issue I have an issue with the search results portlet pagination. When searching for an item by selecting a page after page 20, the first page results are shown instead of the selected page. Steps to reproduce: Set up 2024.q2.13, set this property into the portal-ext.properties:...

Issue We've observed an undesirable behavior when trying to access "Information Templates". When navigating to Design > Templates > Information Templates, the page is blank. There is no option to create a new "Information Template". Environment 2025.Q1 Quarterly Release Resolution This...

Issue In a clustered Liferay environment, changes made on Node 1 are not consistently reflected on Node 2. The changes only appear after restarting the Liferay server. Environment Liferay DXP [All versions] Resolution Verifying tcp.xml Placement for Clustering Configuration: Ensure that...

Issue Is Keycloak supported with Liferay? If yes, how can SAML be configured with Liferay? Environment Lifeary DXP [All versions] Resolution As per Liferay’s official compatibility matrix, Keycloak is not listed as a supported Identity Provider (IdP), as it has not been explicitly tested...

Issue When trying to update the web content's custom field value of type Integer with API, an errorClassCastException occurs. Steps to reproduce: Create a custom field of integer in the web content article. Create a structure having 2 fields. Create web content using that structure. Call...

Issue When attempting to create web content that includes nested fields using the Headless API, the user encounters a 400 Bad Request error. The response message states: "Value should not be set for transient field 'name" Steps to reproduce: 1. Create a structure having 1 nested field (2...

Issue I have an issue with the use of the language selector in a private page. When I try to change the locale using the language selector, I get redirected to a 404 error page. Reproduction Steps: Start 2024.q1.17. Enable Private Pages feature from: Control Panel --> Configuration -->...

Issue Any builds being deployed to the Liferay Cloud console fail with the error: Unknown arguments: use-external-git, useExternalGit Environment PaaS Quarterly Release Resolution There is an incompatibility with CLI versions prior to 3.20.1. LCD-46433 was specifically created to address...

Issue Given: A company-scoped custom object A workflow assigned to the above-mentioned object (at Global Menu > Applications tab > Workflow section > Process Builder > Assignments tab) And a workflow task assigned to a Site Role Outcome: The workflow tasks do not get assigned to the...

Issue Dynamic Data Lists (DDLs) changes are not managed within Publications mode. Any changes or new DDL records are directly published to production. Environment DXP 7.3 Resolution DDL changes are not supported through Publications in Liferay DXP 7.3. This feature was introduced in...

Issue After upgrading to a Quarterly Release, web content structures are not visible in the second instance when creating web content. Environment Liferay Quarterly Release upgraded from a previous version Resolution Reindex the second instance, starting with the Dynamic Data Mapping...

Issue Can I use both a custom certificate and a Liferay-provided certificate? Environment Liferay SaaS Resolution Yes, it's possible to use both a custom certificate (e.g., for domain.es) and a Liferay-provided Let's Encrypt certificate (e.g., for domain.pt) simultaneously for different...

Issue How can users enable audio for CAPTCHA verification? Environment Liferay DXP 7.4 and above Resolution Liferay does not provide out-of-the-box (OOTB) support for audio CAPTCHA functionality. However, users can consider the following option: Integrate Google reCAPTCHA : Google...

Issue I have an issue with Page Audit. The feature has stopped working. When initiating an audit on a page, the progress bar reaches 99% and then stops, resulting in a null pointer exception error being thrown in the log. Reproduction Steps: Start 2024.q2.12 Go to Control Panel >...

Issue After upgrading to 2025.Q1.9 we've found that our page are largely inoperable. There are a large amount of console errors related to missing functions, missing MIME types, missing AUI, etc. Environment 2025.Q1.8 2025.Q1.9 2025.Q1.10 Quarterly Release Resolution Liferay has...

Issue We've discovered a behavior that occurs when trying to edit existing collections or creating new collections. The page fails to load. The main error that popualates references a missing classname: com.lifery.portal.kernel.exception.NoSuchClassNameException: No ClassName exists with...

Issue I have an issue with the web content scheduling. I set the time zone of the user's OS to CET while the user and the server are set to UTC (by default). I create web content and schedule it to be less than 1 hour in the future (compared to the time on the user's PC, but the time on...

Issue Some search results lead to 404 pages, even after reindexing. Pages exist but cannot be navigated to with the search bar. Search bar is unresponsive when clicking on certain results. Environment Liferay DXP Quarterly Release 2024.Q4+ Resolution This is potentially caused by...

Issue I have noticed that when I use the headless /o/api Rest Application menu has duplicated items. It is duplicated next time after being selected and used. It does not impact the functionality. Reproduction Steps: Start a 2025.Q1.8-lts Go to /o/api and select headlessDelivery Try to...

Issue I have an issue with the web content article display date. When I update the web content by changing the title, the published date disappears. Reproduction Steps: 1. Start 2025.q1.8-lts 2. Go to Content & Data --> Web Content, and create basic web content 3. Read all articles using...

Issue New deploys fails due to the database service and backup restores too Checking the database service logs you identify the following: INFO May 15 14:54:39.664 1904 database 75b864bd48-zzc6n [INFO] Instance status: available INFO May 15 14:54:44.856 1904 database 75b864bd48-zzc6n...

Issue I'm trying to customize the default list of time zones in Liferay DXP by setting the time.zones property in the portal-ext.properties file. I didn't include GMTin the configuration, but it is still showing up in the time zone dropdown. Environment Liferay Quarterly Releases...

Issue Since we allowed access to some users to contribute content, we are getting many issues with Liferay service restarts. While we are working with the platform, following error message is shown without any apparent reason: 'An error occurred with this application'. when we check the...

Issue We are putting up commons-io on osgi/module folder so it will be readily available to all modules, on our previous version of Liferay (DXP 2024 Q1.7), the commons-io worked, however now we are updating to the latest DXP quarterly release 2025-05-13 15:30:46.537 ERROR...

Issue When we generate a new build, we get the following error: ERROR: the command "[lcp, deploy, --only-build, --project, resumed, --metadata,...

Issue When users enable workflow for web content, the expiration date feature is not working as expected. Steps to reproduce: 1. Start the server 2. Apply 'Single Approver Workflow' for web content. 3. Navigate to Content & Data > Web Content > Create basic web content. 4. Now, scroll...

Issue How to expose object entries to guest users without manually assigning permissions to each entry. Assigning permission will work here but if the number of entries in the object is large, it will not be feasible to assign the permission each and every time for each entry....

Issue The category filter fragment only expands or collapses the category list when clicking the dropdown arrow. Clicking the category name itself does not trigger this action. Steps to reproduce:  1. Navigate to any page and open it in edit mode 2. Drag and drop the 'Category filter' on...

Issue We would like to verify if our Liferay instance is vulnerable to CVE-2021-29044 Environment DXP 7.2, DXP 7.3 Resolution Please see if your current patch level is higher than 7.2 FP10, or 7.3 DXP1.  If your current patch level is lower than the above listed, please open a ticket and...

Issue After upgrading to 2025.q1.6-lts, I received the following error in the log: Feature flag LPD-10588 is not available for company 0 Environment Liferay Quarterly Release 2025.q1.6-lts Resolution The case has been addressed and resolved by LPD-56013. Kindly request a hotfix. After...

Issue Issue description: I have enabled a review workflow for an object and noticed that if I want the reviewer to be able to edit the submitted object entry during the review task, I need to add the "Access in Control Panel" permission to the reviewer's role. But that is too much,...

Issue Deploying an EXT extension results in the extension being lost after the environment restarts. Environment Quarterly Releases 2023.Q3.3+. PaaS Resolution The use of EXT modules is discouraged. Please explore alternative extensions before proceeding, if possible. Starting from...

Issue An unnecessary hidden heading, <h1 class="sr-only">Navigation</h1>, is present in the page source code. Although hidden visually, it is still picked up by screen readers, which can confuse users relying on assistive technologies. The entire page content is wrapped in a <div> with...

Issue When attempting to access Analytics Cloud via https://analytics.liferay.com the site hangs indefinitely on the "Redirecting to your identity provider..." message. This can occur despite successfully logging in previously. Environment Analytics Cloud Ad-blocker browser extension...

Issue We have enabled a workflow for approving new user account creation. While the Admin user gets the notficiation about the workflow task, if they navigate to My Workflow Tasks > Assigned to my Roles, the task is not listed there.   Environment 2024.Q3 2024.Q4 2025.Q1 2025.Q2  ...

Issue After configuring settings such as JS or CSS on the pages of a site with Local Staging enabled, the changes are being lost after publishing to Live   Environment 2024.Q1.12 (or older versions)   Resolution This behavior is a known error in the Product and has been fixed on version...

Issue We would like prevent direct access to portlet render URLs (/c/portal/render_portlet) that bypass normal navigation within the portal.  These portlets have been manually added to the page. Example URL:...