Liferay Portal JSON Web Services Detected

info Web App Scanning Plugin ID 115043

Synopsis

Liferay Portal JSON Web Services Detected

Description

This is an informational plugin to inform the user that the scanner has detected that the target Liferay instance publicly exposes the JSON web services.

Solution

If the JSON web services are not expected to be public, restrict their access.

See Also

https://learn.liferay.com/w/dxp/integration/headless-apis/using-liferay-as-a-headless-platform/consuming-apis/configuring-json-web-services

Plugin Details

Severity: Info

ID: 115043

Type: remote

Published: 11/24/2025

Updated: 11/24/2025

Scan Template: basic, full, pci, scan