Open Redirect Vulnerability in Liferay Portal and Liferay DXP

CVE-2025-43767

What is CVE-2025-43767?

An open redirect vulnerability has been identified in Liferay Portal versions and Liferay DXP, allowing attackers to manipulate the redirect parameter. This can lead users to malicious sites without their consent, posing significant security risks. Organizations using affected versions should take corrective action to mitigate potential exposure.

References