Open Redirect Vulnerability in Liferay Portal and DXP

CVE-2025-43795

What is CVE-2025-43795?

An open redirect vulnerability exists in the System Settings, Instance Settings, and Site Settings of Liferay Portal and Liferay DXP, allowing remote attackers to manipulate the redirect parameter. This imperfection enables the potential redirection of users to arbitrary external URLs, posing risks such as phishing attacks and unauthorized access to sensitive information. Users running versions from 7.1.0 to 7.4.3.101 and multiple DXP versions are particularly affected, necessitating immediate assessment and remediation to bolster web application security.

References