Executive brief
Liferay Portal: Missing Rate Limiting in GraphQL Endpoint Enables Resource Exhaustion Attack
Affected products
- Maven com.liferay:com.liferay.portal.vulcan.impl
- Maven com.liferay:com.liferay.portal.vulcan.api
Junglewise Threat Intelligence
CVE-2025-43796: Liferay Portal: Missing Rate Limiting in GraphQL Endpoint Enables Resource Exhaustion Attack
CVE-2025-43796 · Severity: medium · CVSS 4 · Published 2025-09-12
Technologies: com.liferay:com.liferay.portal.vulcan.impl (Maven). Vendors: Maven.