CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.7. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-43768
Severity
HIGH
CVSS
7.7
EPSS
0.32%
Original NVD Description
Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to access sensitive information of admin users using JSONWS APIs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)