Medium severity5.3NVD Advisory· Published Aug 22, 2025· Updated Jun 17, 2026
CVE-2025-43751
CVE-2025-43751
Description
User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10 and 7.4 GA through update 92 allows remote attackers to determine if an account exist in the application via the create account page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
com.liferay:com.liferay.login.webMaven | < 6.0.66 | 6.0.66 |
Affected products
98cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*+ 93 more
- cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*range: >=2023.Q3.1,<=2023.Q3.10
- cpe:2.3:a:liferay:digital_experience_platform:7.4:-:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update10:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update11:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update12:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update13:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update14:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update15:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update16:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update17:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update18:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update19:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update1:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update20:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update21:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update22:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update23:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update24:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update25:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update26:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update27:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update28:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update29:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update2:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update30:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update31:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update32:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update33:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update34:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update35:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update36:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update37:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update38:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update39:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update3:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update40:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update41:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update42:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update43:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update44:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update45:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update46:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update47:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update48:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update49:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update4:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update50:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update51:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update52:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update53:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update54:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update55:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update56:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update57:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update58:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update59:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update5:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update60:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update61:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update62:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update63:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update64:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update65:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update66:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update67:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update68:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update69:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update6:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update70:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update71:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update72:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update73:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update74:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update75:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update76:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update77:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update78:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update79:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update7:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update80:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update81:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update82:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update83:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update84:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update85:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update86:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update87:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update88:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update89:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update8:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update90:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update91:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update92:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update9:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
12- github.com/advisories/GHSA-xwc5-q44v-p6ggghsaADVISORY
- liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43751nvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2025-43751ghsaADVISORY
- github.com/liferay/liferay-portal/commit/097597e31b596295cb993bac596a42f06ac1e6d8ghsaWEB
- github.com/liferay/liferay-portal/commit/1205e7bbcc31c40180935044d39ebf158b5256e1ghsaWEB
- github.com/liferay/liferay-portal/commit/4843e000995ef5fbe4e4f14dce23c2f3116940deghsaWEB
- github.com/liferay/liferay-portal/commit/4987ff8641b970db3dca14d75bb9687120107c3bghsaWEB
- github.com/liferay/liferay-portal/commit/4f3b52bc92875cd0a0958ea33dece09b8224e6dcghsaWEB
- github.com/liferay/liferay-portal/commit/609104647a5a0bb79627ef689a2f8dc9fe9fbb05ghsaWEB
- github.com/liferay/liferay-portal/commit/7b8376791cfe22bfce14e5f241af1d158d535fd8ghsaWEB
- github.com/liferay/liferay-portal/commit/7e9e29a9dac8e5b6db6f2a480c98b483584b2f87ghsaWEB
- liferay.atlassian.net/browse/LPE-18203ghsaWEB
News mentions
0No linked articles in our index yet.