CVE-2025-43777
1 advisory.
Maven/com.liferay:com.liferay.portal.security.sso.openid.connect.impl CVE-2025-43777: medium 5.3, EPSS 0.24%
Liferay Portal exposes 500 status when attempting login with a deleted client secret
Action: Upgrade com.liferay:com.liferay.portal.security.sso.openid.connect.impl to 7.0.48 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.4 | 7.0.48 | - |
Fixed versions
| 7.0.48 |
Sources
- osv: GHSA-9vwq-j6gq-w9xh
- nvd: CVE-2025-43777
- https://github.com/liferay/liferay-portal/commit/e4ae0e49dd90485f2f2d8d07ab972da5aba7fa45
- https://github.com/liferay/liferay-portal
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43777
CVE-2025-43777 · published · modified · JSON