com.liferay:com.liferay.asset.categories.admin.web (>=1.0.17, <=1.1.14), com.liferay:com.liferay.asset.tags.admin.web (>=1.0.5, <=1.0.14) potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (2.14.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.asset.categories.admin.web =1.0.17, =1.0.5, =1.0.1...

com.liferay:com.liferay.announcements.web (>=1.0.2, <=1.0.3), com.liferay:com.liferay.portal.template.freemarker (>=2.0.2, <=3.0.8) +2 more potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (2.2.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.announcements.web =1.0.2, =2.0.2, =2.0.1, =2.0.27 -...

com.liferay:com.liferay.message.boards.comment (>=2.0.11, <=2.0.19), com.liferay:com.liferay.message.boards.web (>=1.2.25, <=1.3.0) potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (2.19.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.message.boards.comment =2.0.11, =1.2.25, =1.3.0...

com.liferay:com.liferay.portal.lpkg.deployer (2.1.6) potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (2.25.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.lpkg.deployer 2.1.6 Source cves:...

com.liferay:com.liferay.directory.web (>=1.0.14, <=1.0.22), com.liferay:com.liferay.portal.settings.web (>=1.1.9, <=1.2.4) +1 more potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (2.17.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.directory.web =1.0.14, =1.1.9, =2.3.6, =2.4.8 Sour...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.4) potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (4.12.11)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

com.liferay:com.liferay.frontend.js.bundle.config.extender (>=1.0.5, <=1.0.11), com.liferay:com.liferay.frontend.js.loader.modules.extender (>=1.0.7, <=2.0.1) +2 more potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (2.10.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.frontend.js.bundle.config.extender =1.0.5, =1.0.7,...

com.liferay:com.liferay.portal.tools.service.builder (>=1.0.150, <=1.0.155) potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (2.13.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.150, =1.0.155...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.2.1) potentially affected by CVE-2025-43813 via com.liferay.portal:com.liferay.portal.impl (5.9.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

CVE-2025-43813

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...