CVE-2025-43773 in Liferay

Riassunto

di MITRE • 29/08/2025

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improper access through the expandoTableLocalService.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Liferay
• Prenotare: 17/04/2025
• Divulgazione: 29/08/2025
• Moderazione: accettato
• Voce: VDB-321977
• CPE: pronto
• CWE: CWE-862 (confermato)
• CVSS: 9.1 (NVD)
• EPSS: 0.00288
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-43773
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-43773
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-43773/