SSRF Vulnerability in Liferay Portal and Liferay DXP Affects User Authentication
CVE-2025-4581

5.3MEDIUM

Key Information:

Vendor

Liferay
Status
Portal
Dxp
Vendor
CVE Published:
9 August 2025

What is CVE-2025-4581?

The vulnerability affects Liferay Portal and Liferay DXP, allowing a pre-authentication blind Server-Side Request Forgery (SSRF) due to improper validation of user-supplied URLs in the portal-settings-authentication-opensso-web feature. An attacker could exploit this flaw to make unauthorized HTTP requests to internal systems, which may lead to internal network enumeration or further exploitation, posing significant risks to the security posture of affected organizations.

Affected Version(s)

DXP 7.4.13 <= 7.4.13-u92

DXP 2024.Q1.1 <= 2024.Q1.15

DXP 2024.Q2.0 <= 2024.Q2.13

References

https://liferay.dev/portal/security/known-vulnerabilities...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Shubham Shah - CTO @ Assetnote
Adam Kues - Security Researcher @ Assetnote
.
CVE-2025-4581 : SSRF Vulnerability in Liferay Portal and Liferay DXP Affects User Authentication