Unchecked Input for Loop Condition in Liferay Portal by Liferay

CVE-2025-43801

What is CVE-2025-43801?

An unchecked input vulnerability exists in the XML-RPC interface of Liferay Portal versions 7.4.0 to 7.4.3.111, as well as various versions of Liferay DXP. This flaw allows remote attackers to send crafted XML-RPC requests, which can exploit the loop condition input handling leading to potential denial-of-service attacks. Affected environments may see disruption in service, emphasizing the need for immediate attention and patching to secure vulnerable systems.

References