GitHub Advisoryadvisory · Maven

GHSA-2hm7-r8f3-423h Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet

MEDIUM Published 2025-09-30 Modified 2025-09-30 Official page ↗
Aliases
CVE-2025-43813
Ecosystem
Maven
Packages
com.liferay.portal:release.portal.bom, com.liferay.portal:com.liferay.portal.impl
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Weaknesses
CWE-22
Reviewed
2025-09-30

Affected packages

• Maven com.liferay.portal:release.portal.bom: >= 7.4.0-ga1, < 7.4.3.108-ga108 → fixed in 7.4.3.108-ga108 • Maven com.liferay.portal:com.liferay.portal.impl: < 96.0.0 → fixed in 96.0.0

Description

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to access arbitrary CSS and JSS files and load the files multiple times via the query string in a URL.

Related

Alias · CVE (1)

  • CVE-2025-43813 Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References