{"action":"Upgrade com.liferay:com.liferay.login.web to 6.0.66 or later.","affected":[{"fixed":"6.0.66","introduced":"0"}],"component":"com.liferay:com.liferay.login.web","cve_ids":["CVE-2025-43751"],"ecosystem":"Maven","epss":0.00306,"exploited":false,"fixed_versions":["6.0.66"],"ghsa_id":"GHSA-xwc5-q44v-p6gg","id":"tcs_01M5N9K35C8M7VQBNN1H5JTGKT","modified_at":"2025-12-20T05:44:43.728819Z","published_at":"2025-08-22T18:31:23Z","references":["https://osv.dev/vulnerability/GHSA-xwc5-q44v-p6gg","https://nvd.nist.gov/vuln/detail/CVE-2025-43751","https://github.com/liferay/liferay-portal/commit/097597e31b596295cb993bac596a42f06ac1e6d8","https://github.com/liferay/liferay-portal/commit/1205e7bbcc31c40180935044d39ebf158b5256e1","https://github.com/liferay/liferay-portal/commit/4843e000995ef5fbe4e4f14dce23c2f3116940de","https://github.com/liferay/liferay-portal/commit/4987ff8641b970db3dca14d75bb9687120107c3b","https://github.com/liferay/liferay-portal/commit/4f3b52bc92875cd0a0958ea33dece09b8224e6dc","https://github.com/liferay/liferay-portal/commit/609104647a5a0bb79627ef689a2f8dc9fe9fbb05","https://github.com/liferay/liferay-portal/commit/7b8376791cfe22bfce14e5f241af1d158d535fd8","https://github.com/liferay/liferay-portal/commit/7e9e29a9dac8e5b6db6f2a480c98b483584b2f87","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-18203","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43751"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xwc5-q44v-p6gg","url":"https://osv.dev/vulnerability/GHSA-xwc5-q44v-p6gg"},{"source":"nvd","source_id":"CVE-2025-43751","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43751"}],"summary":"Liferay Portal User Enumeration Vulnerability via the Create Account Page"}