Executive Summary

CVE-2025-43803 is an Insecure Direct Object Reference (IDOR) vulnerability in the Contacts Center widget of Liferay Portal and Liferay DXP. It allows remote attackers to access contact information, such as the contact's name and email address, by manipulating the _com_liferay_contacts_web_portlet_ContactsCenterPortlet_entryId parameter. This means unauthorized users can view sensitive contact details without proper authorization. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized disclosure of contact information, including names and email addresses. Attackers can remotely access this sensitive data without needing any privileges or user interaction, potentially leading to privacy breaches, targeted phishing attacks, or other malicious activities that exploit exposed contact details. [1]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring HTTP requests to the Contacts Center widget in Liferay Portal or Liferay DXP for suspicious manipulation of the `_com_liferay_contacts_web_portlet_ContactsCenterPortlet_entryId` parameter. You can use tools like curl or wget to test if unauthorized access to contact information is possible by sending requests with different entryId values. For example, a command like `curl -i 'http://<liferay-server>/path/to/contactscenter?_com_liferay_contacts_web_portlet_ContactsCenterPortlet_entryId=<test_id>'` can be used to check if contact details are exposed without proper authorization. [1]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include upgrading Liferay Portal or Liferay DXP to a fixed version where the vulnerability is resolved, such as Liferay Portal 7.4.3.120, Liferay DXP 2023.Q4.7, 2024.Q1.1, or 2024.Q2.0. If upgrading is not immediately possible, restrict access to the Contacts Center widget to trusted users only, implement network-level controls to limit exposure, and monitor logs for suspicious access patterns involving the `_com_liferay_contacts_web_portlet_ContactsCenterPortlet_entryId` parameter. [1]

Useful 0 Not Useful 0