Kurz gesagt
- CVE-2025-43772 ist eine Schwachstelle (HOCH (CVSS 7.1)) in com.liferay:com.liferay.portal.workflow.kaleo.forms.web.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.52%, höher als bei 44.0% aller Schwachstellen.
- Abhilfe: auf 5.0.29 oder neuer aktualisieren.
Description
Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP request.
NVD description
Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP request.
Weitere Schwachstellen in com.liferay:com.liferay.portal.workflow.kaleo.forms.web
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free