CVE-2025-43745

Maven/com.liferay.portal:release.portal.bom CVE-2025-43745: medium 6.5, EPSS 0.25%

Liferay Portal CSRF Vulnerability via Endpoint Parameter

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-7q33-gwcm-r6cj
• nvd: CVE-2025-43745
• https://github.com/liferay/liferay-portal/commit/037b58f96c9ded47960ab493a68d68aaf32b1a43
• https://github.com/liferay/liferay-portal/commit/2387ee78fd471ea1c1c4d696aa0cbb1bce72665e
• https://github.com/liferay/liferay-portal/commit/729dfc202c9d2724b5f3f749ead14eb13832e101
• https://github.com/liferay/liferay-portal
• https://liferay.atlassian.net/browse/LPE-18275
• https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43745

CVE-2025-43745 · published 2025-08-19T21:30:36Z · modified 2025-08-20T20:12:20.515402Z · JSON