Maven package
com.liferay/com.liferay.multi.factor.authentication.timebased.otp.web
pkg:maven/com.liferay/com.liferay.multi.factor.authentication.timebased.otp.web
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-43798 | — | < 2.0.25 | 2.0.25 | Sep 15, 2025 | Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the |
- CVE-2025-43798Sep 15, 2025affected < 2.0.25fixed 2.0.25
Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the