Liferay Portal API Explorer Detected

info Web App Scanning Plugin ID 115041

Synopsis

Liferay Portal API Explorer Detected

Description

This is an informational plugin to inform the user that the scanner has detected that the target Liferay instance publicly expose the API explorer.

Solution

If the API explorer is not expected to public, restrict its access.

See Also

https://learn.liferay.com/w/dxp/integration/headless-apis/using-liferay-as-a-headless-platform/consuming-apis/consuming-rest-services

https://liferay.dev/b/the-api-explorer

Plugin Details

Severity: Info

ID: 115041

Type: remote

Published: 11/24/2025

Updated: 11/24/2025

Scan Template: basic, full, pci, scan