CyberRota Analysis
This vulnerability has an unknown severity rating. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2025-43772
Severity
UNKNOWN
CVSS
N/A
EPSS
0.47%
Original NVD Description
Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP request.