EUVD-2025-43792

Malicious code in jaja-otak-otak1-riris npm...

com.liferay.portal:com.liferay.portal.impl (3.2.0), com.liferay.portal:com.liferay.portal.test.integration (3.2.0) +1 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (3.2.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 3.2.0 -...

com.liferay.portal:com.liferay.portal.impl (2.83.0) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (2.83.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.83.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.83.0 Source cves:...

com.liferay.portal:com.liferay.portal.impl (4.6.0), com.liferay.portal:com.liferay.portal.test (4.6.0) +1 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (4.6.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.6.0 -...

com.liferay.portal:com.liferay.portal.impl (2.9.0), com.liferay.portal:com.liferay.util.taglib (2.9.0) +2 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (2.9.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.9.0 -...

com.liferay.portal:com.liferay.portal.impl (3.52.0) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (3.52.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 3.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 3.52.0 Source cves:...

com.liferay.portal:com.liferay.portal.impl (4.2.3), com.liferay.portal:com.liferay.portal.test (4.2.3) +1 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (4.2.3)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.2.3 -...

com.liferay.portal:com.liferay.portal.impl (4.5.0), com.liferay.portal:com.liferay.portal.test (4.5.0) +1 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (4.5.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.5.0 -...

com.liferay.portal:com.liferay.portal.impl (3.25.0) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (3.25.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 3.25.0 Source cves:...

com.liferay.portal:com.liferay.portal.impl (65.0.1) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (65.0.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 65.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 65.0.1 Source cves:...

com.liferay.portal:com.liferay.portal.impl (2.64.1) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (2.64.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.64.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.64.1 Source cves:...

com.liferay.portal:com.liferay.portal.impl (5.0.1), com.liferay.portal:com.liferay.portal.test (5.0.1) +4 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (5.0.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 5.0.1 -...

com.liferay.portal:com.liferay.portal.impl (3.59.0), de.mklinger.qetcher:qetcher-adapter-liferay-71 (>=2.0.6, <=2.0.7) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (3.59.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 3.59.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 3.59.0 -...

com.liferay.portal:com.liferay.portal.impl (2.34.0), com.liferay:com.liferay.portal.cache.ehcache (2.1.8) +1 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (2.34.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.34.0 -...

com.liferay.portal:com.liferay.portal.impl (3.33.1) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (3.33.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 3.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 3.33.1 Source cves:...

com.liferay.portal:com.liferay.portal.impl (2.28.0), com.liferay:com.liferay.exportimport.service (>=3.5.4, <=3.6.4) +3 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (2.28.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.28.0 -...

com.liferay.portal:com.liferay.portal.impl (2.4.0), com.liferay.portal:com.liferay.util.java (2.4.0) +121 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (2.4.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.4.0 -...

com.liferay.portal:com.liferay.portal.impl (2.12.0), com.liferay.portal:com.liferay.util.taglib (2.12.0) +7 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (2.12.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.12.0 -...

com.liferay.portal:com.liferay.portal.impl (14.0.0), com.liferay.portal:com.liferay.portal.test (14.0.0) +2 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (14.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 14.0.0 -...

com.liferay.portal:com.liferay.portal.impl (4.4.1), com.liferay.portal:com.liferay.portal.test (4.4.1) +1 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (4.4.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.4.1 -...