Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

PT-2025-33734 · Liferay · Liferay Portal +1

🗓️ 19 Aug 2025 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 3 Views

Authenticated users can modify calendar portlet emails; phishing risk; upgrade Liferay versions.

Related
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-43739
19 Aug 202514:10
–circl
CNNVD		Liferay Portal和Liferay DXP 安全漏洞
19 Aug 202500:00
–cnnvd
CVE		CVE-2025-43739
19 Aug 202513:54
–cve
Cvelist		CVE-2025-43739
19 Aug 202513:54
–cvelist
EUVD		EUVD-2025-25166
3 Oct 202520:07
–euvd
Github Security Blog		Liferay Portal Email Modification Vulnerability via Calendar Portlet
19 Aug 202515:31
–github
Tenable Nessus		Liferay Portal 7.4.0.x <= 7.4.3.132 Multiple Vulnerabilities
7 Aug 202500:00
–nessus
NVD		CVE-2025-43739
19 Aug 202514:15
–nvd
OSV		CVE-2025-43739
19 Aug 202514:15
–osv
OSV		GHSA-7MXQ-H2R7-H449 Liferay Portal Email Modification Vulnerability via Calendar Portlet
19 Aug 202515:31
–osv
Rows per page
SourceLink
osvwww.osv.dev/vulnerability/GHSA-7mxq-h2r7-h449
nvdwww.nvd.nist.gov/vuln/detail/CVE-2025-43739
githubwww.github.com/liferay/liferay-portal/commit/75be892f7cf31e1a38555d45627b0c2a06490d3d
githubwww.github.com/liferay/liferay-portal/commit/e50c1a0a53d30b4e55f47495e265c5b7ea3459e1
githubwww.github.com/liferay/liferay-portal/commit/7d70fab2259ff8b4a775021eb95bfc183823f8fc
githubwww.github.com/liferay/liferay-portal/commit/7eb551616c6b8beeaf660ff7f29b09794cb80d91
githubwww.github.com/liferay/liferay-portal/commit/0a9f5df16ae0afa8216ca568b89b2cdf00054bde
githubwww.github.com/liferay/liferay-portal/commit/f238677d9afb46cfe4e23f05ce11bd5197a70388
githubwww.github.com/liferay/liferay-portal/commit/ff18e7d363f2a3bc83e9d3446f1bc49bee821883
githubwww.github.com/liferay/liferay-portal/commit/c1660f1a906c5ee3adca51e68f0abd6f9c1d253f
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
19 Aug 2025 00:00Current
6.2Medium risk
Vulners AI Score6.2
CVSS 45.3
EPSS0.00086
SSVC
authenticated usercalendar portletemail contentphishing riskliferay portal versionsliferay releases 7.4
3