{"action":"Upgrade com.liferay:com.liferay.portal.template.freemarker to 7.0.60 or later.","affected":[{"fixed":"7.0.60","introduced":"7.0.3"}],"component":"com.liferay:com.liferay.portal.template.freemarker","cve_ids":["CVE-2025-43825"],"ecosystem":"Maven","epss":0.003,"exploited":false,"fixed_versions":["7.0.60"],"ghsa_id":"GHSA-rggc-gf6w-9q73","id":"tcs_01M5N9BSCVS24JGWXJ6P8SNPHN","modified_at":"2025-12-17T00:45:02.678510Z","published_at":"2025-10-04T00:32:21Z","references":["https://osv.dev/vulnerability/GHSA-rggc-gf6w-9q73","https://nvd.nist.gov/vuln/detail/CVE-2025-43825","https://github.com/liferay/liferay-portal/commit/ff6c9fb24587a0c7bf3c48356a38b3f492670ea0","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-18166","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43825"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rggc-gf6w-9q73","url":"https://osv.dev/vulnerability/GHSA-rggc-gf6w-9q73"},{"source":"nvd","source_id":"CVE-2025-43825","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43825"}],"summary":"Liferay Portal exposes sensitive user data through its Freemarker template"}