CVE-2025-43773: Critical severity Liferay portal vulnerability
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improper access through the expandoTableLocalService.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43773?
CVE-2025-43773 is classified as a security vulnerability that allows for improper access in Liferay Portal and Liferay DXP.
How do I fix CVE-2025-43773?
To fix CVE-2025-43773, you should upgrade Liferay Portal to version 7.4.3.133 or higher and Liferay DXP to the latest versions as specified in the vendor's advisory.
Which versions are affected by CVE-2025-43773?
CVE-2025-43773 affects Liferay Portal versions 7.4.0 to 7.4.3.132 and Liferay DXP versions 2025.Q1.0 to 2025.Q2.1.
What types of systems are impacted by CVE-2025-43773?
CVE-2025-43773 impacts Liferay Portal and Liferay DXP systems that fall within the specified version ranges.
Is there a workaround for CVE-2025-43773?
There is no documented workaround for CVE-2025-43773; the recommended action is to apply the available security update.