CVE-2025-43783
- Source
- https://cve.org/CVERecord?id=CVE-2025-43783
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-43783.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-43783
- Aliases
- Published
- 2025-09-10T20:15:33.977Z
- Modified
- 2026-04-12T16:55:17.377313Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 update 73 through update 92 allows remote attackers to inject arbitrary web script or HTML via the /c/portal/comment/discussion/get_editor path.
- References
Affected packages
Git / github.com/liferay/liferay-portal
Affected versions
7.*
7.4.0-ga1
7.4.1-ga2
7.4.2-ga3
7.4.3.4-ga4
7.4.3.41-ga41
7.4.3.5-ga5
7.4.3.6-ga6
7.4.3.7-ga7
7.4.3.88-ga88
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-43783.json"
vanir_signatures
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 304.0,
"function_hash": "57115968376390560967885530032985434205"
},
"source": "https://github.com/liferay/liferay-portal/commit/9bc3ecc0e54e74532403f3b281d3d542e95babd8",
"id": "CVE-2025-43783-89cd59f6",
"signature_type": "Function",
"target": {
"function": "testUpgradeProcess",
"file": "modules/apps/dynamic-data-mapping/dynamic-data-mapping-test/src/testIntegration/java/com/liferay/dynamic/data/mapping/internal/upgrade/v5_6_1/test/DDMFieldAttributeUpgradeProcessTest.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"179772675958613422767713377468908871682",
"244399705317510526091317168555219523761",
"132569019723834552443776610039766080788",
"32054084799560152186930759783497281023",
"234529184054465291764936572438166749093",
"78377685304783572495740352849876029142",
"134663871138638082137858968838889813557",
"7936592204798143019898109296741974255"
]
},
"source": "https://github.com/liferay/liferay-portal/commit/9bc3ecc0e54e74532403f3b281d3d542e95babd8",
"id": "CVE-2025-43783-ee25579f",
"signature_type": "Line",
"target": {
"file": "modules/apps/dynamic-data-mapping/dynamic-data-mapping-test/src/testIntegration/java/com/liferay/dynamic/data/mapping/internal/upgrade/v5_6_1/test/DDMFieldAttributeUpgradeProcessTest.java"
}
}
]
vanir_signatures_modified
"2026-04-12T16:55:17Z"
unresolved_ranges
[
{
"events": [
{
"introduced": "2024.Q1.1"
},
{
"fixed": "2024.Q1.13"
}
]
},
{
"events": [
{
"introduced": "2024.q2.0"
},
{
"last_affected": "2024.q2.13"
}
]
},
{
"events": [
{
"introduced": "2024.Q3.0"
},
{
"fixed": "2024.Q3.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update73"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update74"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update75"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update76"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update77"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update78"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update79"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update80"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update81"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update82"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update83"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update84"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update85"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update86"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update87"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update88"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update89"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update90"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update91"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4-update92"
}
]
}
]