Executive brief
Liferay Portal has External Control of System or Configuration Settings
Affected products
- Maven com.liferay.portal:com.liferay.portal.kernel
Junglewise Threat Intelligence
CVE-2025-43792: Liferay Portal has External Control of System or Configuration Settings
CVE-2025-43792 · Severity: medium · CVSS 4 · Published 2025-09-15
Technologies: com.liferay.portal:com.liferay.portal.kernel (Maven). Vendors: Maven.
Related threats
- Liferay Portal has Improper Validation of Specified Quantity in Input
- Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter
- Liferay Portal SessionClicks does not restrict the saving of request parameters in the HTTP session
- Deserialization of Untrusted Data in Liferay Portal