Liferay Portal Username Enumeration Vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-43754 · ADVISORY
• liferay/liferay-portal commit f25bb95 · WEB
• liferay/liferay-portal commit c8041d0 · WEB
• liferay/liferay-portal commit 9ce8b8d · WEB
• liferay/liferay-portal commit 9b4be82 · WEB
• liferay/liferay-portal commit 862ca74 · WEB
• liferay/liferay-portal commit 7118e95 · WEB
• liferay/liferay-portal commit 6fdbb05 · WEB
• liferay/liferay-portal commit 6f6f9f0 · WEB
• liferay/liferay-portal commit 6629bb1

Lỗ hổng khác của com.liferay.portal:release.portal.bom

• CVE-2025-62264TRUNG BÌNH 6.1Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q…
• CVE-2025-62265TRUNG BÌNH 5.4Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and …
• CVE-2025-62266TRUNG BÌNH 6.1By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 t…
• CVE-2025-62257TRUNG BÌNH 5.3Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 thro…
• CVE-2025-62259TRUNG BÌNH 5.4Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 9…