CVE-2025-43792

🗓️ 15 Sep 2025 17:15:34Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 1 Views

CVE-2025-43792 enables remote exfiltration via remoteAddress/remotePort for authenticated users; requires staging secret and whitelist.

Reporter	Title	Published	Views	Family All 13
CNNVD	Liferay Portal和Liferay DXP 安全漏洞	15 Sep 202500:00	–	cnnvd
CVE	CVE-2025-43792	15 Sep 202516:19	–	cve
Cvelist	CVE-2025-43792	15 Sep 202516:19	–	cvelist
EUVD	EUVD-2025-29221	3 Oct 202520:07	–	euvd
Github Security Blog	Liferay Portal has External Control of System or Configuration Settings	15 Sep 202518:31	–	github
OSV	CVE-2025-43792	15 Sep 202517:15	–	osv
OSV	GHSA-VP64-77C6-33H8 Liferay Portal has External Control of System or Configuration Settings	15 Sep 202518:31	–	osv
Positive Technologies	PT-2025-37725	15 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-43792	17 Sep 202516:52	–	redhatcve
Snyk	External Control of System or Configuration Setting	15 Sep 202518:31	–	snyk

NVD

Node

liferay digital_experience_platformRange<7.3

OR

liferay digital_experience_platformRange2023.q3.1–2023.q3.5

OR

liferay digital_experience_platformMatch7.3-

OR

liferay digital_experience_platformMatch7.3fix_pack_1

OR

liferay digital_experience_platformMatch7.3fix_pack_2

OR

liferay digital_experience_platformMatch7.3service_pack_1

OR

liferay digital_experience_platformMatch7.3service_pack_2

OR

liferay digital_experience_platformMatch7.3service_pack_3

OR

liferay digital_experience_platformMatch7.3update1

OR

liferay digital_experience_platformMatch7.3update10

OR

liferay digital_experience_platformMatch7.3update11

OR

liferay digital_experience_platformMatch7.3update12

OR

liferay digital_experience_platformMatch7.3update13

OR

liferay digital_experience_platformMatch7.3update14

OR

liferay digital_experience_platformMatch7.3update15

OR

liferay digital_experience_platformMatch7.3update16

OR

liferay digital_experience_platformMatch7.3update17

OR

liferay digital_experience_platformMatch7.3update18

OR

liferay digital_experience_platformMatch7.3update19

OR

liferay digital_experience_platformMatch7.3update2

OR

liferay digital_experience_platformMatch7.3update20

OR

liferay digital_experience_platformMatch7.3update21

OR

liferay digital_experience_platformMatch7.3update22

OR

liferay digital_experience_platformMatch7.3update23

OR

liferay digital_experience_platformMatch7.3update24

OR

liferay digital_experience_platformMatch7.3update25

OR

liferay digital_experience_platformMatch7.3update26

OR

liferay digital_experience_platformMatch7.3update27

OR

liferay digital_experience_platformMatch7.3update28

OR

liferay digital_experience_platformMatch7.3update29

OR

liferay digital_experience_platformMatch7.3update3

OR

liferay digital_experience_platformMatch7.3update30

OR

liferay digital_experience_platformMatch7.3update31

OR

liferay digital_experience_platformMatch7.3update32

OR

liferay digital_experience_platformMatch7.3update33

OR

liferay digital_experience_platformMatch7.3update34

OR

liferay digital_experience_platformMatch7.3update35

OR

liferay digital_experience_platformMatch7.3update4

OR

liferay digital_experience_platformMatch7.3update5

OR

liferay digital_experience_platformMatch7.3update6

OR

liferay digital_experience_platformMatch7.3update7

OR

liferay digital_experience_platformMatch7.3update8

OR

liferay digital_experience_platformMatch7.3update9

OR

liferay digital_experience_platformMatch7.4-

OR

liferay digital_experience_platformMatch7.4update1

OR

liferay digital_experience_platformMatch7.4update10

OR

liferay digital_experience_platformMatch7.4update11

OR

liferay digital_experience_platformMatch7.4update12

OR

liferay digital_experience_platformMatch7.4update13

OR

liferay digital_experience_platformMatch7.4update14

OR

liferay digital_experience_platformMatch7.4update15

OR

liferay digital_experience_platformMatch7.4update16

OR

liferay digital_experience_platformMatch7.4update17

OR

liferay digital_experience_platformMatch7.4update18

OR

liferay digital_experience_platformMatch7.4update19

OR

liferay digital_experience_platformMatch7.4update2

OR

liferay digital_experience_platformMatch7.4update20

OR

liferay digital_experience_platformMatch7.4update21

OR

liferay digital_experience_platformMatch7.4update22

OR

liferay digital_experience_platformMatch7.4update23

OR

liferay digital_experience_platformMatch7.4update24

OR

liferay digital_experience_platformMatch7.4update25

OR

liferay digital_experience_platformMatch7.4update26

OR

liferay digital_experience_platformMatch7.4update27

OR

liferay digital_experience_platformMatch7.4update28

OR

liferay digital_experience_platformMatch7.4update29

OR

liferay digital_experience_platformMatch7.4update3

OR

liferay digital_experience_platformMatch7.4update30

OR

liferay digital_experience_platformMatch7.4update31

OR

liferay digital_experience_platformMatch7.4update32

OR

liferay digital_experience_platformMatch7.4update33

OR

liferay digital_experience_platformMatch7.4update34

OR

liferay digital_experience_platformMatch7.4update35

OR

liferay digital_experience_platformMatch7.4update36

OR

liferay digital_experience_platformMatch7.4update37

OR

liferay digital_experience_platformMatch7.4update38

OR

liferay digital_experience_platformMatch7.4update39

OR

liferay digital_experience_platformMatch7.4update4

OR

liferay digital_experience_platformMatch7.4update40

OR

liferay digital_experience_platformMatch7.4update41

OR

liferay digital_experience_platformMatch7.4update42

OR

liferay digital_experience_platformMatch7.4update43

OR

liferay digital_experience_platformMatch7.4update44

OR

liferay digital_experience_platformMatch7.4update45

OR

liferay digital_experience_platformMatch7.4update46

OR

liferay digital_experience_platformMatch7.4update47

OR

liferay digital_experience_platformMatch7.4update48

OR

liferay digital_experience_platformMatch7.4update49

OR

liferay digital_experience_platformMatch7.4update5

OR

liferay digital_experience_platformMatch7.4update50

OR

liferay digital_experience_platformMatch7.4update51

OR

liferay digital_experience_platformMatch7.4update52

OR

liferay digital_experience_platformMatch7.4update53

OR

liferay digital_experience_platformMatch7.4update54

OR

liferay digital_experience_platformMatch7.4update55

OR

liferay digital_experience_platformMatch7.4update56

OR

liferay digital_experience_platformMatch7.4update57

OR

liferay digital_experience_platformMatch7.4update58

OR

liferay digital_experience_platformMatch7.4update59

OR

liferay digital_experience_platformMatch7.4update6

OR

liferay digital_experience_platformMatch7.4update60

OR

liferay digital_experience_platformMatch7.4update61

OR

liferay digital_experience_platformMatch7.4update62

OR

liferay digital_experience_platformMatch7.4update63

OR

liferay digital_experience_platformMatch7.4update64

OR

liferay digital_experience_platformMatch7.4update65

OR

liferay digital_experience_platformMatch7.4update66

OR

liferay digital_experience_platformMatch7.4update67

OR

liferay digital_experience_platformMatch7.4update68

OR

liferay digital_experience_platformMatch7.4update69

OR

liferay digital_experience_platformMatch7.4update7

OR

liferay digital_experience_platformMatch7.4update70

OR

liferay digital_experience_platformMatch7.4update71

OR

liferay digital_experience_platformMatch7.4update72

OR

liferay digital_experience_platformMatch7.4update73

OR

liferay digital_experience_platformMatch7.4update74

OR

liferay digital_experience_platformMatch7.4update75

OR

liferay digital_experience_platformMatch7.4update76

OR

liferay digital_experience_platformMatch7.4update77

OR

liferay digital_experience_platformMatch7.4update78

OR

liferay digital_experience_platformMatch7.4update79

OR

liferay digital_experience_platformMatch7.4update8

OR

liferay digital_experience_platformMatch7.4update80

OR

liferay digital_experience_platformMatch7.4update81

OR

liferay digital_experience_platformMatch7.4update82

OR

liferay digital_experience_platformMatch7.4update83

OR

liferay digital_experience_platformMatch7.4update84

OR

liferay digital_experience_platformMatch7.4update85

OR

liferay digital_experience_platformMatch7.4update86

OR

liferay digital_experience_platformMatch7.4update87

OR

liferay digital_experience_platformMatch7.4update88

OR

liferay digital_experience_platformMatch7.4update89

OR

liferay digital_experience_platformMatch7.4update9

OR

liferay digital_experience_platformMatch7.4update90

OR

liferay digital_experience_platformMatch7.4update91

OR

liferay digital_experience_platformMatch7.4update92

OR

liferay digital_experience_platformMatch2023.q4.0

OR

liferay liferay_portalRange<7.4.3.106

Source	Link
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43792

16 Dec 2025 15:28Current

CVSS 3.15.3

CVSS 42.3

EPSS0.00066

remoteAddress remotePort authenticated users staging secret whitelist