{"id":9684,"date":"2025-08-04T17:44:31","date_gmt":"2025-08-04T17:44:31","guid":{"rendered":"http:\/\/localhost\/?p=9684"},"modified":"2025-08-04T17:44:31","modified_gmt":"2025-08-04T17:44:31","slug":"cve-2025-4599","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=9684","title":{"rendered":"CVE-2025-4599"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nCVE-2025-4599<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-08-04T21:18:14.251Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-08-04T21:18:14.251Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nLiferay<\/td>\n<\/tr>\n
Product<\/th>\nPortal<\/td>\n<\/tr>\n
Version<\/th>\n7.4.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n2.0 (LOW)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:P\/PR:H\/UI:P\/VC:L\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA postMessage-based XSS vulnerability in Liferay Portal allows remote attackers to inject JavaScript into the fragment portlet URL, potentially leading to unauthorized actions.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
AI Vendor<\/th>\nLiferay, Inc.<\/td>\n<\/tr>\n
AI Product<\/th>\nLiferay Portal<\/td>\n<\/tr>\n
AI Version<\/th>\n7.4.0, 7.4.3.61, 7.4.3.132, 2024.Q1.1, 2024.Q2.0, 2024.Q3.0, 2024.Q4.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n