CVE-2025-43768
BaseFortify
Publication date: 2025-08-23
Last updated on: 2025-12-12
Assigner: Liferay Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| liferay | digital_experience_platform | From 2024.Q1.1 (inc) to 2024.Q1.16 (exc) |
| liferay | digital_experience_platform | From 2024.q2.0 (inc) to 2024.q2.13 (inc) |
| liferay | digital_experience_platform | From 2024.q3.1 (inc) to 2024.q3.13 (inc) |
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4 |
| liferay | liferay_portal | From 7.4.0 (inc) to 7.4.3.132 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-201 | The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-43768 is a vulnerability in Liferay Portal and Liferay DXP where authenticated users without any specific permissions can access sensitive information of admin users through the JSONWS API endpoint. This means that even users with minimal access rights can retrieve confidential admin data due to improper access controls in certain versions of the software. [1]
How can this vulnerability impact me? :
This vulnerability can lead to unauthorized disclosure of sensitive admin user information to authenticated users who should not have access to it. This could result in privacy breaches, potential misuse of admin data, and increased risk of further attacks leveraging the exposed information. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves monitoring access to the JSONWS API endpoints on affected Liferay Portal or DXP versions. You can check logs for authenticated users accessing JSONWS API paths without proper permissions. Specific commands depend on your environment, but for example, using curl to test access: curl -u <user>:<password> https://<liferay-host>/api/jsonws/ to see if sensitive admin information is returned without proper authorization. Additionally, reviewing web server or application logs for unusual JSONWS API access patterns by authenticated users without admin roles can help detect exploitation attempts. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include upgrading Liferay Portal to version 7.4.3.132 or later, or Liferay DXP to 2025.Q1.0 or later, where the vulnerability is fixed. Until an upgrade is possible, restrict access to the JSONWS API endpoints to trusted users only, and monitor for suspicious access. Applying network-level controls such as firewall rules to limit access to the API and enforcing strong authentication policies can also reduce risk. [1]