Internal Server Error Exposure in Liferay Portal by Liferay

CVE-2025-43777

What is CVE-2025-43777?

A vulnerability in Liferay Portal and Liferay DXP versions exposes sensitive information by returning an 'Internal Server Error' message when a login attempt is made with a deleted Client Secret. This behavior can assist attackers in gaining unauthorized access to system functions. Proper validation checks and handling error messages should be implemented to remediate this issue and enhance application security.

References