CVE-2025-43763
1 advisory.
Maven/com.liferay:com.liferay.object.service CVE-2025-43763: medium 6.5, EPSS 0.20%
Liferay Portal is vulnerable to SSRF through custom object attachment fields
Action: Upgrade com.liferay:com.liferay.object.service to 1.0.208 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.208 | - |
Fixed versions
| 1.0.208 |
Sources
- osv: GHSA-477q-x55m-j38g
- nvd: CVE-2025-43763
- https://github.com/liferay/liferay-portal/commit/0adf32842d055f40accc8b341c4feb11a9728261
- https://github.com/liferay/liferay-portal/commit/e5fe3f9e9916e66a896e7c321e641c6eabbf4dae
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-18182
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43763
CVE-2025-43763 · published · modified · JSON