Open Redirect Vulnerability in Liferay Portal and DXP

CVE-2025-43795

What is CVE-2025-43795?

An open redirect vulnerability exists in the System Settings, Instance Settings, and Site Settings of Liferay Portal and Liferay DXP, allowing remote attackers to manipulate the redirect parameter. This imperfection enables the potential redirection of users to arbitrary external URLs, posing risks such as phishing attacks and unauthorized access to sensitive information. Users running versions from 7.1.0 to 7.4.3.101 and multiple DXP versions are particularly affected, necessitating immediate assessment and remediation to bolster web application security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References