Skip to content
OpenAdvisories
Medium WID-SEC-2025-2041 7 CVEs

Liferay Portal: Mehrere Schwachstellen

Published Sep 11, 2025 · Updated Sep 14, 2025 · Revision 2 · de-DE

Vendor: Liferay Product: DXP Product: Portal Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.

Product

Liferay Portal ist eine Open-Source-Webplattform für Unternehmen, die ein Framework für die Erstellung und Verwaltung von webbasierten Anwendungen und Inhalten bietet.
Liferay DXP (Digital Experience Platform) ist eine erweiterte und kommerziell unterstützte Version von Liferay Portal, die zusätzliche Funktionen und Dienste bietet.

Vulnerabilities 7

  • High 7.4
    CVE-2025-43790

    Liferay Portal is vulnerable to Insecure Direct Object Reference (IDOR) attack through Authentication Bypass

    Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.6, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote authenticated users to from one virtual insta…

    Liferay DXP Portal com.liferay:com.liferay.object.service Maven
  • Medium 6.9
    CVE-2025-43786

    Liferay Portal exposes ERC which can lead to exploit the time response attack

    Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existe…

    Liferay DXP Portal com.liferay:com.liferay.portal.vulcan.impl Maven
  • Medium 5.3
    CVE-2025-43781

    Liferay Portal is vulnerable to XSS attack through its search bar portlet

    Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script…

    Liferay DXP Portal com.liferay:com.liferay.portal.search.web Maven
  • Medium 5.3
    CVE-2025-43782

    Liferay Portal API Allows Authenticated Users to Access Workflow Definitions by Name

    Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote authenticated users to access a workflow def…

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.runtime.integration.impl Maven
  • Medium 5.3
    CVE-2025-43788

    Liferay Portal's Organization Selector exposes organization data to remote authenticated users

    The organization selector in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q1.1 through 2024.Q1.12 and 7.4 update 81 through update 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.

    Liferay DXP Portal com.liferay:com.liferay.organizations.item.selector.web Maven
  • Medium 4.6
    CVE-2025-43775

    Liferay Portal is vulnerable to XSS attacks via its remote app title field

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote attackers to inject …

    Liferay DXP Portal com.liferay:com.liferay.client.extension.web Maven
  • Low 1.0
    CVE-2025-43789

    Liferay Portal JSON Web Services Direct Class Invocation Enables Service Access Policy Execution

    JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSGi are registered and invoked directly as classes which allows Service Access Policies get executed.

    Liferay DXP Portal com.liferay:com.liferay.comment.web Maven

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-29005

  2. #1

    Initiale Fassung

References