CVE-2025-43743

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows any authenticated remote user to view other calendars by...

CVE-2025-43743

**CVE-2025-43743 affects Liferay Portal 7.4.x and various DXP/GA releases (up to 92/2025.Q1.5 and 7.4 GA update 92). The root cause is information exposure via the calendar feature, allowing any authenticated remote user to enumerate other users’ names by crafting requests, enabling potential phi...