CVE-2025-43814
1 advisory.
Maven/com.liferay:com.liferay.portal.security.audit.event.generators.user.management CVE-2025-43814: medium 6.5, EPSS 0.35%
Liferay Portal and DXP audit events record password reminder answers
Action: Upgrade com.liferay:com.liferay.portal.security.audit.event.generators.user.management to 5.0.13 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.13 | - |
Fixed versions
| 5.0.13 |
Sources
- osv: GHSA-ph63-chvv-8x46
- nvd: CVE-2025-43814
- https://github.com/liferay/liferay-portal/commit/6d0f123c838b96fd71fb97f422366ffa43391121
- https://github.com/liferay/liferay-portal/commit/76c9c38f21614bf0dca877057b13f6a449c041e8
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-17937
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43814
CVE-2025-43814 · published · modified · JSON