CVE-2025-43751
1 advisory.
Maven/com.liferay:com.liferay.login.web CVE-2025-43751: medium 5.3
Liferay Portal User Enumeration Vulnerability via the Create Account Page
Action: Upgrade com.liferay:com.liferay.login.web to 6.0.66 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.66 | - |
Fixed versions
| 6.0.66 |
Sources
- osv: GHSA-xwc5-q44v-p6gg
- nvd: CVE-2025-43751
- https://github.com/liferay/liferay-portal/commit/097597e31b596295cb993bac596a42f06ac1e6d8
- https://github.com/liferay/liferay-portal/commit/1205e7bbcc31c40180935044d39ebf158b5256e1
- https://github.com/liferay/liferay-portal/commit/4843e000995ef5fbe4e4f14dce23c2f3116940de
- https://github.com/liferay/liferay-portal/commit/4987ff8641b970db3dca14d75bb9687120107c3b
- https://github.com/liferay/liferay-portal/commit/4f3b52bc92875cd0a0958ea33dece09b8224e6dc
- https://github.com/liferay/liferay-portal/commit/609104647a5a0bb79627ef689a2f8dc9fe9fbb05
- https://github.com/liferay/liferay-portal/commit/7b8376791cfe22bfce14e5f241af1d158d535fd8
- https://github.com/liferay/liferay-portal/commit/7e9e29a9dac8e5b6db6f2a480c98b483584b2f87
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-18203
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43751
CVE-2025-43751 · published · modified · JSON