CVE-2025-43782
1 advisory.
Maven/com.liferay:com.liferay.portal.workflow.kaleo.runtime.integration.impl CVE-2025-43782: medium 4.3, EPSS 0.33%
Liferay Portal API Allows Authenticated Users to Access Workflow Definitions by Name
Action: Upgrade com.liferay:com.liferay.portal.workflow.kaleo.runtime.integration.impl to 5.0.48 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.1 | 5.0.48 | - |
Fixed versions
| 5.0.48 |
Sources
- osv: GHSA-wr8m-5h2p-4432
- nvd: CVE-2025-43782
- https://github.com/liferay/liferay-portal/commit/4e85bafae4c4e17d3f87054d1f1d49a908d79819
- https://github.com/liferay/liferay-portal/commit/720f2d3fde180e5c2971a5d01246dfec36f68131
- https://github.com/liferay/liferay-portal/commit/acf50c712f7f21c2f52db30883486cb885c8bdd0
- https://github.com/liferay/liferay-portal/commit/ad55ef75cb82c8b1ed01f311488475a646481731
- https://github.com/liferay/liferay-portal/commit/b61004c960e10d576634096fccc9f71677df0fbd
- https://github.com/liferay/liferay-portal/commit/c30a8b729e133f7f40277ce7dc350b87d13d49c7
- https://github.com/liferay/liferay-portal
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43782
CVE-2025-43782 · published · modified · JSON