CVE-2025-43745

🗓️ 19 Aug 2025 19:15:35Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 1 Views

CSRF in Liferay Portal and DXP allows cross-origin actions on behalf of auth user via endpoint param

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2025-43745	19 Aug 202520:43	–	circl
CNNVD	Liferay Portal和Liferay DXP 跨站请求伪造漏洞	19 Aug 202500:00	–	cnnvd
CVE	CVE-2025-43745	19 Aug 202518:39	–	cve
Cvelist	CVE-2025-43745	19 Aug 202518:39	–	cvelist
EUVD	EUVD-2025-25202	3 Oct 202520:07	–	euvd
Github Security Blog	Liferay Portal CSRF Vulnerability via Endpoint Parameter	19 Aug 202521:30	–	github
Tenable Nessus	Liferay Portal 7.4.0.x <= 7.4.3.132 Multiple Vulnerabilities	7 Aug 202500:00	–	nessus
OSV	CVE-2025-43745	19 Aug 202519:15	–	osv
OSV	GHSA-7Q33-GWCM-R6CJ Liferay Portal CSRF Vulnerability via Endpoint Parameter	19 Aug 202521:30	–	osv
Positive Technologies	PT-2025-33842 · Liferay · Liferay Dxp +1	19 Aug 202500:00	–	ptsecurity

NVD

Node

liferay digital_experience_platformRange2024.q1.1–2024.q1.20

OR

liferay digital_experience_platformRange2024.q2.0–2024.q2.13

OR

liferay digital_experience_platformRange2024.q3.1–2024.q3.13

OR

liferay digital_experience_platformRange2024.q4.0–2024.q4.7

OR

liferay digital_experience_platformRange2025.Q1.0–2025.Q1.16

OR

liferay digital_experience_platformRange2025.Q2.0–2025.Q2.8

OR

liferay digital_experience_platformMatch7.4update32

OR

liferay digital_experience_platformMatch7.4update33

OR

liferay digital_experience_platformMatch7.4update34

OR

liferay digital_experience_platformMatch7.4update35

OR

liferay digital_experience_platformMatch7.4update36

OR

liferay digital_experience_platformMatch7.4update37

OR

liferay digital_experience_platformMatch7.4update38

OR

liferay digital_experience_platformMatch7.4update39

OR

liferay digital_experience_platformMatch7.4update4

OR

liferay digital_experience_platformMatch7.4update40

OR

liferay digital_experience_platformMatch7.4update41

OR

liferay digital_experience_platformMatch7.4update42

OR

liferay digital_experience_platformMatch7.4update43

OR

liferay digital_experience_platformMatch7.4update44

OR

liferay digital_experience_platformMatch7.4update45

OR

liferay digital_experience_platformMatch7.4update46

OR

liferay digital_experience_platformMatch7.4update47

OR

liferay digital_experience_platformMatch7.4update48

OR

liferay digital_experience_platformMatch7.4update49

OR

liferay digital_experience_platformMatch7.4update5

OR

liferay digital_experience_platformMatch7.4update50

OR

liferay digital_experience_platformMatch7.4update51

OR

liferay digital_experience_platformMatch7.4update52

OR

liferay digital_experience_platformMatch7.4update53

OR

liferay digital_experience_platformMatch7.4update54

OR

liferay digital_experience_platformMatch7.4update55

OR

liferay digital_experience_platformMatch7.4update56

OR

liferay digital_experience_platformMatch7.4update57

OR

liferay digital_experience_platformMatch7.4update58

OR

liferay digital_experience_platformMatch7.4update59

OR

liferay digital_experience_platformMatch7.4update6

OR

liferay digital_experience_platformMatch7.4update60

OR

liferay digital_experience_platformMatch7.4update61

OR

liferay digital_experience_platformMatch7.4update62

OR

liferay digital_experience_platformMatch7.4update63

OR

liferay digital_experience_platformMatch7.4update64

OR

liferay digital_experience_platformMatch7.4update65

OR

liferay digital_experience_platformMatch7.4update66

OR

liferay digital_experience_platformMatch7.4update67

OR

liferay digital_experience_platformMatch7.4update68

OR

liferay digital_experience_platformMatch7.4update69

OR

liferay digital_experience_platformMatch7.4update7

OR

liferay digital_experience_platformMatch7.4update70

OR

liferay digital_experience_platformMatch7.4update71

OR

liferay digital_experience_platformMatch7.4update72

OR

liferay digital_experience_platformMatch7.4update73

OR

liferay digital_experience_platformMatch7.4update74

OR

liferay digital_experience_platformMatch7.4update75

OR

liferay digital_experience_platformMatch7.4update76

OR

liferay digital_experience_platformMatch7.4update77

OR

liferay digital_experience_platformMatch7.4update78

OR

liferay digital_experience_platformMatch7.4update79

OR

liferay digital_experience_platformMatch7.4update8

OR

liferay digital_experience_platformMatch7.4update80

OR

liferay digital_experience_platformMatch7.4update81

OR

liferay digital_experience_platformMatch7.4update82

OR

liferay digital_experience_platformMatch7.4update83

OR

liferay digital_experience_platformMatch7.4update84

OR

liferay digital_experience_platformMatch7.4update85

OR

liferay digital_experience_platformMatch7.4update86

OR

liferay digital_experience_platformMatch7.4update87

OR

liferay digital_experience_platformMatch7.4update88

OR

liferay digital_experience_platformMatch7.4update89

OR

liferay digital_experience_platformMatch7.4update9

OR

liferay digital_experience_platformMatch7.4update90

OR

liferay digital_experience_platformMatch7.4update91

OR

liferay digital_experience_platformMatch7.4update92

OR

liferay liferay_portalRange7.4.0–7.4.3.132

Source	Link
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43745

15 Dec 2025 20:06Current

CVSS 3.16.5

CVSS 46.9

EPSS0.00036

liferay portal liferay digital experience csrf vulnerability cross origin endpoint parameter authenticated user