Open Redirect Vulnerability in Liferay Portal and Liferay DXP
CVE-2025-43767
5.1MEDIUM
What is CVE-2025-43767?
An open redirect vulnerability has been identified in Liferay Portal versions and Liferay DXP, allowing attackers to manipulate the redirect parameter. This can lead users to malicious sites without their consent, posing significant security risks. Organizations using affected versions should take corrective action to mitigate potential exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
DXP 7.4.13-u86 <= 7.4.13-u92
DXP 2024.Q1.1 <= 2024.Q1.12
DXP 2024.Q2.0 <= 2024.Q2.13
References
CVSS V4
Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved