{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"7.4.0-ga1","last_affected":"7.4.3.132-ga132"}],"component":"com.liferay.portal:release.portal.bom","cve_ids":["CVE-2025-43752"],"ecosystem":"Maven","epss":0.00331,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qpp6-f3qj-rggq","id":"tcs_01M5N99YEWSB7VE9Z317RV9DJM","modified_at":"2025-12-20T03:21:36.164247Z","published_at":"2025-08-22T03:30:24Z","references":["https://osv.dev/vulnerability/GHSA-qpp6-f3qj-rggq","https://nvd.nist.gov/vuln/detail/CVE-2025-43752","https://github.com/liferay/liferay-portal/commit/45dda30252d83912307491d8ed8802577871fa25","https://github.com/liferay/liferay-portal/commit/f3e4723acdf15d3f690d401d6eb6a5653e5be391","https://github.com/liferay/liferay-portal/commit/fffed67b3fd1cc6071fd25a9b104b7691ffea2f8","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-18188","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43752"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qpp6-f3qj-rggq","url":"https://osv.dev/vulnerability/GHSA-qpp6-f3qj-rggq"},{"source":"nvd","source_id":"CVE-2025-43752","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43752"}],"summary":"Liferay Portal's Unlimited File Upload Could Result in DoS"}