Medium severity5.3NVD Advisory· Published Aug 21, 2025· Updated Jun 17, 2026
CVE-2025-43754
CVE-2025-43754
Description
Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows attackers to determine if an account exist in the application by inspecting the server processing time of the login request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
com.liferay.portal:release.portal.bomMaven | >= 7.4.0-ga1, <= 7.4.3.132-ga132 | — |
Affected products
98cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*+ 93 more
- cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*range: >=2024.Q1.1,<2024.Q1.15
- cpe:2.3:a:liferay:digital_experience_platform:7.4:-:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update10:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update11:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update12:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update13:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update14:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update15:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update16:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update17:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update18:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update19:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update1:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update20:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update21:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update22:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update23:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update24:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update25:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update26:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update27:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update28:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update29:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update2:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update30:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update31:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update32:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update33:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update34:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update35:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update36:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update37:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update38:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update39:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update3:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update40:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update41:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update42:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update43:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update44:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update45:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update46:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update47:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update48:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update49:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update4:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update50:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update51:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update52:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update53:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update54:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update55:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update56:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update57:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update58:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update59:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update5:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update60:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update61:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update62:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update63:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update64:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update65:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update66:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update67:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update68:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update69:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update6:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update70:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update71:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update72:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update73:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update74:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update75:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update76:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update77:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update78:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update79:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update7:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update80:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update81:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update82:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update83:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update84:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update85:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update86:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update87:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update88:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update89:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update8:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update90:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update91:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update92:*:*:*:*:*:*
- cpe:2.3:a:liferay:digital_experience_platform:7.4:update9:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
23- github.com/advisories/GHSA-x7p4-v8mj-6fxxghsaADVISORY
- liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43754nvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2025-43754ghsaADVISORY
- github.com/liferay/liferay-portal/commit/8199c568a66d66d6ad7ac450d3c69f6e0e9bd181ghsaWEB
- github.com/liferay/liferay-portal/commit/06b603671f0e76cd50f56d803a310a3c79944d1dghsaWEB
- github.com/liferay/liferay-portal/commit/18a88af5409a5085cb094f5bc55229d5e03a9f29ghsaWEB
- github.com/liferay/liferay-portal/commit/33697cf599a2c573ef9571696af55476ecc2ada6ghsaWEB
- github.com/liferay/liferay-portal/commit/367dc7d19aa31eaf881f217ceff9610f1747e2d7ghsaWEB
- github.com/liferay/liferay-portal/commit/38c0a06cebf0d635aa2af9912c068217161fcf1eghsaWEB
- github.com/liferay/liferay-portal/commit/45c3ca76966ddfaf8fe650f28910b0f55536f2b4ghsaWEB
- github.com/liferay/liferay-portal/commit/53e6dcaa31a7599df8de9d3cef92e59e95a2064eghsaWEB
- github.com/liferay/liferay-portal/commit/556450752159503476635c44736721ad797fa431ghsaWEB
- github.com/liferay/liferay-portal/commit/5b1bf48b0dc2a062928237ab1ea4a2274c63e652ghsaWEB
- github.com/liferay/liferay-portal/commit/6629bb176c1f58ca852d599c013bd3e97b3312d3ghsaWEB
- github.com/liferay/liferay-portal/commit/6f6f9f0922f6a13e21236915b864e0c1c12e47a9ghsaWEB
- github.com/liferay/liferay-portal/commit/6fdbb052a6e0cbe8b300138fb75f88df69f58799ghsaWEB
- github.com/liferay/liferay-portal/commit/7118e956516d48792fb9365d1ae1f0ee971a8ac3ghsaWEB
- github.com/liferay/liferay-portal/commit/862ca74aaf98c70823022b6556cdc8a339128f79ghsaWEB
- github.com/liferay/liferay-portal/commit/9b4be82e964e9bbab1ce9824a61d9f40b28f38bbghsaWEB
- github.com/liferay/liferay-portal/commit/9ce8b8dec237f9b9049760904fcefd06a8695832ghsaWEB
- github.com/liferay/liferay-portal/commit/c8041d0f527388305897ac79f98d012bb31b82acghsaWEB
- github.com/liferay/liferay-portal/commit/f25bb9583f059f86937649fdacf940928ca3767bghsaWEB
- liferay.atlassian.net/browse/LPE-18149ghsaWEB
News mentions
0No linked articles in our index yet.