Open Redirect Vulnerability in Liferay Portal and Liferay DXP
CVE-2025-43767

5.1MEDIUM

Key Information:

Vendor

Liferay

Status
Vendor
CVE Published:
23 August 2025

What is CVE-2025-43767?

An open redirect vulnerability has been identified in Liferay Portal versions and Liferay DXP, allowing attackers to manipulate the redirect parameter. This can lead users to malicious sites without their consent, posing significant security risks. Organizations using affected versions should take corrective action to mitigate potential exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

DXP 7.4.13-u86 <= 7.4.13-u92

DXP 2024.Q1.1 <= 2024.Q1.12

DXP 2024.Q2.0 <= 2024.Q2.13

References

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.