Skip to content
OpenAdvisories
Medium WID-SEC-2025-1900 13 CVEs

Liferay Portal: Mehrere Schwachstellen

Published Aug 24, 2025 · Updated Aug 24, 2025 · de-DE

Vendor: Liferay Product: DXP Product: Portal

Summary

Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, Benutzer auf bösartige Websites umzuleiten und Cross-Site-Scripting-Angriffe durchzuführen.

Product

Liferay Portal ist eine Open-Source-Webplattform für Unternehmen, die ein Framework für die Erstellung und Verwaltung von webbasierten Anwendungen und Inhalten bietet.
Liferay DXP (Digital Experience Platform) ist eine erweiterte und kommerziell unterstützte Version von Liferay Portal, die zusätzliche Funktionen und Dienste bietet.

Vulnerabilities 13

  • Medium 6.9
    CVE-2025-43751

    Liferay Portal User Enumeration Vulnerability via the Create Account Page

    User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 20…

    Liferay DXP Portal com.liferay:com.liferay.login.web Maven
  • Medium 6.9
    CVE-2025-43761

    Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.4, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update…

    Liferay DXP Portal com.liferay:com.liferay.frontend.editor.ckeditor.web npm Maven
  • Medium 6.9
    CVE-2025-43764

    Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet

    Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2…

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.designer.web Maven
  • Medium 6.9
    CVE-2025-43765

    Liferay Portal stored cross-site scripting in text field of the web content structure

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-au…

    Liferay DXP Portal com.liferay:com.liferay.journal.service Maven
  • Medium 6.9
    CVE-2025-43770

    Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update…

    Liferay DXP Portal com.liferay.portal:com.liferay.portal.kernel Maven
  • Medium 6.8
    CVE-2025-43766

    Liferay Portal allows unrestricted upload of file in the style books component

    The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows the upload of unrestricted files in the style books component t…

    Liferay DXP Portal com.liferay:com.liferay.style.book.web Maven
  • Medium 6.7
    CVE-2025-43759

    Liferay Portal users are able to add system admin portlets to pages

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows admin users of a virtual instance to a…

    Liferay DXP Portal com.liferay:com.liferay.layout.impl Maven
  • Medium 5.3
    CVE-2025-43758

    Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated user…

    Liferay DXP Portal com.liferay:com.liferay.frontend.js.web Maven
  • Medium 5.3
    CVE-2025-43760

    Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.6, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.3
    CVE-2025-43762

    Liferay Portal users can upload an unlimited amount of files

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an un…

    Liferay DXP Portal com.liferay:com.liferay.dynamic.data.mapping.form.field.type Maven
  • Medium 5.1
    CVE-2025-43767

    Liferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect

    Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 9…

    Liferay DXP Portal com.liferay:com.liferay.info.impl Maven
  • Medium 5.1
    CVE-2025-43768

    Liferay Portal JSONWS API endpoint shares sensitive information

    Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to ac…

    Liferay DXP Portal com.liferay.portal:com.liferay.portal.impl Maven
  • Medium 4.6
    CVE-2025-43769

    Liferay Portal vulnerable to Stored XSS in Components portlet

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute …

    Liferay DXP Portal com.liferay:com.liferay.plugins.admin.web Maven

Revision history

  1. #1

    Initiale Fassung

References