Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.contacts.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-43803

    Liferay Contacts Center widget has insecure direct object reference

    Insecure direct object reference (IDOR) vulnerability in the Contacts Center widget in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.6, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92,…

    Liferay DXP Portal com.liferay:com.liferay.contacts.web Maven