CVE-2025-3639
1 advisory.
Maven/com.liferay.portal:release.portal.bom CVE-2025-3639: low 2
Liferay Portal Login Bypass Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.3.0-ga1 | - | 7.4.3.132-ga132 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g4wg-mpfg-x2q6
- nvd: CVE-2025-3639
- https://github.com/liferay/liferay-portal/commit/383a4001cfdf533eb077ed6f03bc5f8fed27cf05
- https://github.com/liferay/liferay-portal/commit/774c89c853d4b9d9abb61d6e079dab21f582cc78
- https://github.com/liferay/liferay-portal/commit/7a70daf60416d536a45fe137d54e1054e9394fa7
- https://github.com/liferay/liferay-portal/commit/a0265c3847af01a37d2a9ad1560e4408f2856518
- https://github.com/liferay/liferay-portal/commit/a5081fefaffdd86a9306320c46e91f98973c39cb
- https://github.com/liferay/liferay-portal/commit/d2806ad26cb194d0c7d654f9c447857e05dd44b2
- https://github.com/liferay/liferay-portal/commit/e4bb21b85440157b588ebbd217995113362962cc
- https://github.com/liferay/liferay-portal/commit/e67b47a47f3bccc9a85aeee6a40cd0188787aa0f
- https://github.com/liferay/liferay-portal/commit/eb0457503fdb8ac49c662b690a6a4eb139ee4c67
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-18212
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-3639
CVE-2025-3639 · published · modified · JSON