6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Description
User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10 and 7.4 GA through update 92 allows remote attackers to determine if an account exist in the application via the create account page.
Basic Information
ID
CVE-2025-43751
Source
Liferay
Published
Aug 22, 2025 at 15:58
Modified
Aug 22, 2025 at 16:26
Affected Product
Vendor
Liferay
Product
Portal
Version
7.4.0
Affected Versions
Liferay Portal 7.4.0
Liferay DXP 7.4.13
Liferay DXP 2023.Q3.1
Liferay DXP 2023.Q4.0
Liferay DXP 2024.Q1.1
Liferay DXP 2024.Q2.0
Liferay DXP 2024.Q3.0
Liferay DXP 2024.Q4.0
Liferay DXP 7.4.13
Liferay DXP 2023.Q3.1
Liferay DXP 2023.Q4.0
Liferay DXP 2024.Q1.1
Liferay DXP 2024.Q2.0
Liferay DXP 2024.Q3.0
Liferay DXP 2024.Q4.0