Sensitive Data Exposure in Liferay Portal and DXP by Liferay Inc.

CVE-2025-43825

What is CVE-2025-43825?

A vulnerability exists in Liferay Portal and Liferay DXP allowing sensitive user data to be included in Freemarker templates. This flaw inadvertently enables unauthorized access to confidential information that should be kept private, potentially compromising user privacy and security. Administrators are encouraged to review their systems and apply the necessary updates to mitigate the risks associated with this vulnerability.

References