CVE-2025-43773 json
Liferay Portal allows improper access through the expandoTableLocalService
published 2025-08-29 14 mo ago modified 2026-10-18 21 d ago also GHSA-876g-49r6-33qj , EUVD-2025-26235
- cvss
- 9.1
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 21%
- public exploits
- 0
- none known
Summary
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improper access through the expandoTableLocalService.
Patch / fix
- maven com.liferay:com.liferay.portal.workflow.kaleo.runtime.impl 6.0.93
- liferay digital_experience_platform 2024.Q1.19, 2025.Q1.15
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 14 mo ago
Exploit prediction
0.29% chance of exploitation in the next 30 days, higher than 21% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 4.6 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N |
| CNA | 4.0 | 4.6 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | com.liferay:com.liferay.portal.workflow.kaleo.runtime.impl | <6.0.93 |
6.0.93 |
Affected products
- Liferay Portal
- Liferay DXP
Classification
- Weakness
-
- CWE-862 Missing Authorization
References
-
github.com
/liferay/liferay-portal/commit/1cbc4b615c270ce986b7fa1835ed196a11ac3234
web
-
github.com
/liferay/liferay-portal/commit/58849cc83348af289944c874301e16e039ae4270
web
-
github.com
/liferay/liferay-portal/commit/8eacaaa1e3552648a3e4a0975731641087d186af
web
-
github.com
/liferay/liferay-portal/commit/9f56b195aec5c1c904242206d61f3fe412701941
web
-
github.com
/liferay/liferay-portal/commit/f33cda648a9082567d7de06c27ba9d3583ee8ff5
web
-
liferay.dev
/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43773
web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2025-43773
advisory
-
github.com
/liferay/liferay-portal
package
-
liferay.atlassian.net
/browse/LPE-18262
web
Sources
- CVE List CVE-2025-43773
- GitHub Advisory GHSA-876g-49r6-33qj
- NVD CVE-2025-43773
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.