Junglewise Threat Intelligence

CVE-2025-43786: Liferay Portal exposes ERC which can lead to exploit the time response attack

CVE-2025-43786 · Severity: medium · CVSS 4 · Published 2025-09-09

Technologies: com.liferay:com.liferay.portal.vulcan.impl (Maven). Vendors: Maven.

Executive brief

Liferay Portal exposes ERC which can lead to exploit the time response attack

Affected products

Maven com.liferay:com.liferay.headless.admin.workflow.impl
Maven com.liferay:com.liferay.portal.workflow.api
Maven com.liferay:com.liferay.portal.vulcan.impl

Related threats