CVE-2025-43790
1 advisory.
Maven/com.liferay:com.liferay.object.service CVE-2025-43790: high 8.1
Liferay Portal is vulnerable to Insecure Direct Object Reference (IDOR) attack through Authentication Bypass
Action: Upgrade com.liferay:com.liferay.object.service to 1.0.197 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.197 | - |
Fixed versions
| 1.0.197 |
Sources
- osv: GHSA-5wxc-3jfw-w94p
- nvd: CVE-2025-43790
- https://github.com/liferay/liferay-portal/commit/66b9a7dc4d40a10dec03e169ca8735add81e9bd9
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-18065
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43790
CVE-2025-43790 · published · modified · JSON