CVE-2025-43775
1 advisory.
Maven/com.liferay:com.liferay.client.extension.web CVE-2025-43775: medium 5.4
Liferay Portal is vulnerable to XSS attacks via its remote app title field
Action: Upgrade com.liferay:com.liferay.client.extension.web to 2.0.27 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.71 | 2.0.27 | - |
Fixed versions
| 2.0.27 |
Sources
- osv: GHSA-88g3-pv3w-5wmr
- nvd: CVE-2025-43775
- https://github.com/liferay/liferay-portal/commit/e54b2b41564df4f11cfa77b3e6c4353cf0a3b16d
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-18123
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43775
CVE-2025-43775 · published · modified · JSON