Liferay Portal GraphQL Schema Detected

info Web App Scanning Plugin ID 115046

Synopsis

Liferay Portal GraphQL Schema Detected

Description

This is an informational plugin to inform the user that the scanner has detected that the target Liferay instance publicly exposes its GraphQL schema.

Solution

If the GraphQL schema is not expected to be public, restrict their access.

See Also

https://learn.liferay.com/w/dxp/integration/headless-apis/using-liferay-as-a-headless-platform/consuming-apis/consuming-graphql-apis

Plugin Details

Severity: Info

ID: 115046

Type: remote

Published: 11/24/2025

Updated: 11/24/2025

Scan Template: basic, full, pci, scan