CVE-2025-4581: SSRF
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation.
Other sources
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, and 7.4 GA through update 92 allow a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web component due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4581?
CVE-2025-4581 is classified as a moderate severity vulnerability due to its potential for exploitation in systems running affected versions.
How do I fix CVE-2025-4581?
To mitigate CVE-2025-4581, update Liferay Portal to version 7.4.3.133 or higher and Liferay DXP to the latest released versions.
What types of systems are affected by CVE-2025-4581?
CVE-2025-4581 affects Liferay Portal versions 7.4.0 to 7.4.3.132 and multiple releases of Liferay DXP from 2024 to 2025.
What kind of vulnerability is CVE-2025-4581?
CVE-2025-4581 is a pre-authentication blind Server-Side Request Forgery (SSRF) vulnerability.
Can CVE-2025-4581 be exploited remotely?
Yes, CVE-2025-4581 can be exploited remotely by an attacker without the need for authentication.