CVE-2025-43805: liferay digital experience platform

csirt@kutim:~/threat-intel/cve/CVE-2025-43805

CVSS 5.3 · Medium EPSS 0,29%

Kerentanan Missing Authorization pada liferay digital experience platform. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.

Rincian

Terbit di NVD: 16 September 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-862: Missing Authorization
EPSS (30 hari): 0,29% peluang dieksploitasi; lebih tinggi dari 19,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
liferay	digital experience platform	Versi 2023.Q3.0 hingga sebelum 2023.Q3.5
liferay	digital experience platform	Versi 7.3
liferay	digital experience platform	Versi 7.3 fix_pack_1
liferay	digital experience platform	Versi 7.3 fix_pack_2
liferay	digital experience platform	Versi 7.3 service_pack_1
liferay	digital experience platform	Versi 7.3 service_pack_2
liferay	digital experience platform	Versi 7.3 service_pack_3
liferay	digital experience platform	Versi 7.3 update1
liferay	digital experience platform	Versi 7.3 update10
liferay	digital experience platform	Versi 7.3 update11
liferay	digital experience platform	Versi 7.3 update12
liferay	digital experience platform	Versi 7.3 update13
liferay	digital experience platform	Versi 7.3 update14
liferay	digital experience platform	Versi 7.3 update15
liferay	digital experience platform	Versi 7.3 update16
liferay	digital experience platform	Versi 7.3 update17
liferay	digital experience platform	Versi 7.3 update18
liferay	digital experience platform	Versi 7.3 update19
liferay	digital experience platform	Versi 7.3 update2
liferay	digital experience platform	Versi 7.3 update20
liferay	digital experience platform	Versi 7.3 update21
liferay	digital experience platform	Versi 7.3 update22
liferay	digital experience platform	Versi 7.3 update23
liferay	digital experience platform	Versi 7.3 update24
liferay	digital experience platform	Versi 7.3 update25
liferay	digital experience platform	Versi 7.3 update26
liferay	digital experience platform	Versi 7.3 update27
liferay	digital experience platform	Versi 7.3 update28
liferay	digital experience platform	Versi 7.3 update29
liferay	digital experience platform	Versi 7.3 update3
liferay	digital experience platform	Versi 7.3 update30
liferay	digital experience platform	Versi 7.3 update31
liferay	digital experience platform	Versi 7.3 update32
liferay	digital experience platform	Versi 7.3 update33
liferay	digital experience platform	Versi 7.3 update34
liferay	digital experience platform	Versi 7.3 update35
liferay	digital experience platform	Versi 7.3 update4
liferay	digital experience platform	Versi 7.3 update5
liferay	digital experience platform	Versi 7.3 update6
liferay	digital experience platform	Versi 7.3 update7
liferay	digital experience platform	Versi 7.3 update8
liferay	digital experience platform	Versi 7.3 update9
liferay	digital experience platform	Versi 7.4
liferay	digital experience platform	Versi 7.4 update1
liferay	digital experience platform	Versi 7.4 update10
liferay	digital experience platform	Versi 7.4 update11
liferay	digital experience platform	Versi 7.4 update12
liferay	digital experience platform	Versi 7.4 update13
liferay	digital experience platform	Versi 7.4 update14
liferay	digital experience platform	Versi 7.4 update15
liferay	digital experience platform	Versi 7.4 update16
liferay	digital experience platform	Versi 7.4 update17
liferay	digital experience platform	Versi 7.4 update18
liferay	digital experience platform	Versi 7.4 update19
liferay	digital experience platform	Versi 7.4 update2
liferay	digital experience platform	Versi 7.4 update20
liferay	digital experience platform	Versi 7.4 update21
liferay	digital experience platform	Versi 7.4 update22
liferay	digital experience platform	Versi 7.4 update23
liferay	digital experience platform	Versi 7.4 update24

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 136 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43805 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.