TI-2025-28335 Aliases CVE-2025-43747 GHSA-7gq9-6fw6-w5q3

Server-side request forgery in Liferay DXP

LOW 21CWE-918Published 2025-08-21 · Updated 2025-08-21

Key facts

Attack vector: Network
Privileges required: High
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: Low · Low · None
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analytics.cloud.domain.allowed, allowing an attacker to perform requests by change the domain and bypassing the validation method, this insecure validation is not distinguishing between trusted subdomains and malicious domains.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00214 11th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Liferay	DXP	2025.Q2.0 – 2025.Q2.3	—	No fix listed	CNA

DXP VendorLiferay Affected 2025.Q2.0 – 2025.Q2.3 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:liferay:digital_experience_platform::::::::	2025.Q2.0 to before 2025.Q2.4	Vulnerable	Liferay

cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:* Versions 2025.Q2.0 to before 2025.Q2.4 Vulnerable ·Liferay

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-43747
2026-10-03 Alias added: GHSA-7gq9-6fw6-w5q3

References

Advisory 1

https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43747

TI-2023-22732 Cross-site scripting in Liferay DXP CVSS 3.1CRITICAL 9.6
TI-2022-20403 A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 through… CVSS 3.1HIGH 8.8
TI-2025-03097 Uncontrolled resource consumption in Liferay Portal CVSS 4.0HIGH 8.7
TI-2025-03169 Uncontrolled resource consumption in Liferay Portal CVSS 4.0HIGH 8.7
TI-2024-17354 Cross-site scripting in Liferay Portal CVSS 3.1CRITICAL 9.6
TI-2024-16598 Cross-site scripting in Liferay Portal CVSS 3.1CRITICAL 9.6

See all 263 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences