Maven package

com.liferay/com.liferay.portal.workflow.kaleo.runtime.integration.impl

pkg:maven/com.liferay/com.liferay.portal.workflow.kaleo.runtime.integration.impl

Vulnerabilities (1)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2025-43782		—		>= 5.0.1, < 5.0.48	5.0.48	Sep 11, 2025	Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote authenticated users to access a workflow definition by name via t

CVE-2025-43782Sep 11, 2025
affected >= 5.0.1, < 5.0.48fixed 5.0.48
Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote authenticated users to access a workflow definition by name via t