CVE-2025-43789
1 advisory.
Maven/com.liferay:com.liferay.comment.web CVE-2025-43789: medium 5.3
Liferay Portal JSON Web Services Direct Class Invocation Enables Service Access Policy Execution
Action: Upgrade com.liferay:com.liferay.comment.web to 6.1.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.2 | 6.1.4 | - |
Fixed versions
| 6.1.4 |
Sources
- osv: GHSA-q86r-gwqc-jx85
- nvd: CVE-2025-43789
- https://github.com/liferay/liferay-portal/commit/576039619a12f28304c5153ad3fa5e39f00548b3
- https://github.com/liferay/liferay-portal/commit/cb349be999396e97883e5fa7ccf2d226737779ac
- https://github.com/liferay/liferay-portal/commit/dfdd81d51808e38098e9a3250f3c8819e0761377
- https://github.com/liferay/liferay-portal/commit/e91daba3736ea30674f0beb5f6622c6df057d18b
- https://github.com/liferay/liferay-portal
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43789
CVE-2025-43789 · published · modified · JSON