{"action":"Upgrade com.liferay.portal:com.liferay.portal.impl to 101.0.0 or later.","affected":[{"fixed":"101.0.0","introduced":"0"}],"component":"com.liferay.portal:com.liferay.portal.impl","cve_ids":["CVE-2025-43801"],"ecosystem":"Maven","epss":0.00402,"exploited":false,"fixed_versions":["101.0.0"],"ghsa_id":"GHSA-95h4-8mqc-4mpf","id":"tcs_01M5N8P69B368RY05ZHQMYA3CK","modified_at":"2025-09-16T20:42:27.252609Z","published_at":"2025-09-16T18:31:27Z","references":["https://osv.dev/vulnerability/GHSA-95h4-8mqc-4mpf","https://nvd.nist.gov/vuln/detail/CVE-2025-43801","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43801"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-95h4-8mqc-4mpf","url":"https://osv.dev/vulnerability/GHSA-95h4-8mqc-4mpf"},{"source":"nvd","source_id":"CVE-2025-43801","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43801"}],"summary":"Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC"}