5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Description
A Insufficient Session Expiration vulnerability in the Liferay Portal 7.4.3.121 through 7.3.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, and 2024.Q1.1 through 2024.Q1.12 is allow an remote non-authenticated attacker to reuse old user session by SLO API
Basic Information
ID
CVE-2025-43819
Source
Liferay
Published
Sep 24, 2025 at 01:37
Affected Product
Vendor
Liferay
Product
Portal
Version
7.4.3.121
Affected Versions
Liferay Portal 7.4.3.121
Liferay DXP 2024.Q1.1
Liferay DXP 2024.Q2.0
Liferay DXP 2024.Q3.1
Liferay DXP 2024.Q4.0
Liferay DXP 2024.Q1.1
Liferay DXP 2024.Q2.0
Liferay DXP 2024.Q3.1
Liferay DXP 2024.Q4.0