{"action":"Upgrade com.liferay:com.liferay.portal.security.sso.openid.connect.impl to 7.0.48 or later.","affected":[{"fixed":"7.0.48","introduced":"6.0.4"}],"component":"com.liferay:com.liferay.portal.security.sso.openid.connect.impl","cve_ids":["CVE-2025-43777"],"ecosystem":"Maven","epss":0.00237,"exploited":false,"fixed_versions":["7.0.48"],"ghsa_id":"GHSA-9vwq-j6gq-w9xh","id":"tcs_01M5N8QWY20M3VEMYH2RZQFK47","modified_at":"2025-09-10T20:42:55.007027Z","published_at":"2025-09-09T03:30:19Z","references":["https://osv.dev/vulnerability/GHSA-9vwq-j6gq-w9xh","https://nvd.nist.gov/vuln/detail/CVE-2025-43777","https://github.com/liferay/liferay-portal/commit/e4ae0e49dd90485f2f2d8d07ab972da5aba7fa45","https://github.com/liferay/liferay-portal","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43777"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9vwq-j6gq-w9xh","url":"https://osv.dev/vulnerability/GHSA-9vwq-j6gq-w9xh"},{"source":"nvd","source_id":"CVE-2025-43777","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43777"}],"summary":"Liferay Portal exposes 500 status when attempting login with a deleted client secret"}