CVE-2025-43819
1 advisory.
Maven/com.liferay:com.liferay.saml.impl CVE-2025-43819: medium 6.5, EPSS 0.18%
Liferay Portal and DXP does not properly expire sessions
Action: Upgrade com.liferay:com.liferay.saml.impl to 5.0.51 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.51 | - |
Fixed versions
| 5.0.51 |
Sources
- osv: GHSA-rpx3-f938-xj5q
- nvd: CVE-2025-43819
- https://github.com/liferay/liferay-portal/commit/433dff5edae4414fdc436b49a9edb62d721c84b5
- https://github.com/liferay/liferay-portal/commit/da9105a61d788801797797a32583a4b76c902cdc
- https://github.com/liferay/liferay-portal
- https://liferay.atlassian.net/browse/LPE-18159
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43819
CVE-2025-43819 · published · modified · JSON