Server-side Request Forgery (SSRF)

Overview com.liferay.portal:com.liferay.portal.impl is a package part of Liferay. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via insecure domain validation on analytics.cloud.domain.allowed. An attacker can make unauthorized requests to internal or extern...

CVE-2025-43747: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analytics.cloud.domain.allowed, allowing an attacker to perform requests by change the domain and bypassing the validation method, this insecure validation i...