CVE-2025-4581
published 2025-08-09CVE-2025-4581: Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0…
PriorityP182high8.6CVSS 3.1
AVNACLPRNUINSCCHINAN
ITWVulnCheck KEV
Exploited in the wild
EPSS
0.36%
29.1th percentile
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| liferay | digital_experience_platform | — | — |
| liferay | digital_experience_platform | 2024.q1.1 – 2024.q1.15 | — |
| liferay | digital_experience_platform | 2024.q2.0 – 2024.q2.13 | — |
| liferay | digital_experience_platform | 2024.q3.1 – 2024.q3.13 | — |
| liferay | digital_experience_platform | 2024.q4.0 – 2024.q4.7 | — |
| liferay | digital_experience_platform | 2025.q1.0 – 2025.q1.4 | — |
| liferay | dxp | 2024.Q1.1 – 2024.Q1.15 | — |
| liferay | dxp | 2024.Q2.0 – 2024.Q2.13 | — |
| liferay | dxp | 2024.Q3.1 – 2024.Q3.13 | — |
| liferay | dxp | 2024.Q4.0 – 2024.Q4.7 | — |
| liferay | dxp | 2025.Q1.0 – 2025.Q1.4 | — |
| liferay | dxp | 7.4.13 – 7.4.13-u92 | — |
| liferay | liferay_portal | 7.4.0 – 7.4.3.132 | — |
| liferay | portal | 7.4.0 – 7.4.3.132 | — |
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
nvdv4.05.3MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vulncheck5.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
osv·2025-08-09
CVE-2025-4581 [MEDIUM] Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, and 7.4 GA through update 92 allow a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web component due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation.
GHSA
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
ghsa·2025-08-09
CVE-2025-4581 [MEDIUM] CWE-918 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, and 7.4 GA through update 92 allow a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web component due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation.
VulnCheck
liferay digital_experience_platform Server-Side Request Forgery (SSRF)
vulncheck·2025·CVSS 5.3
CVE-2025-4581 [MEDIUM] liferay digital_experience_platform Server-Side Request Forgery (SSRF)
liferay digital_experience_platform Server-Side Request Forgery (SSRF)
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows a pre-authentication blind SSRF vulnerability in the portal-settings-authentication-opensso-web due to improper validation of user-supplied URLs. An attacker can exploit this issue to force the server to make arbitrary HTTP requests to internal systems, potentially leading to internal network enumeration or further exploitation.
Affected: liferay digital_experience_platform
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if r
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-08-09
Published
Exploited in the wild