CVE-2025-43772

{
  "id": "CVE-2025-43772",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-04T10:42:31.647",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP request."
    },
    {
      "lang": "es",
      "value": "Kaleo Forms Admin en Liferay Portal 7.0.0 hasta 7.4.3.4, y Liferay DXP 7.4 GA, 7.3 GA hasta la actualización 27, y versiones antiguas no compatibles no restringe el guardado de parámetros de solicitud en la sesión del portlet, lo que permite a atacantes remotos consumir memoria del sistema lo que lleva a condiciones de denegación de servicio (DoS) a través de una solicitud HTTP manipulada."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Liferay",
          "product": "Portal",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "7.0.0",
              "lessThanOrEqual": "7.4.3.5",
              "versionType": "maven",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Liferay",
          "product": "DXP",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "6.2.0",
              "lessThanOrEqual": "portal-173",
              "versionType": "maven",
              "status": "affected"
            },
            {
              "version": "7.0.10",
              "lessThanOrEqual": "de-102",
              "versionType": "maven",
              "status": "affected"
            },
            {
              "version": "7.1.10",
              "lessThanOrEqual": "dxp-28",
              "versionType": "maven",
              "status": "affected"
            },
            {
              "version": "7.2.10",
              "lessThanOrEqual": "dxp-20",
              "versionType": "maven",
              "status": "affected"
            },
            {
              "version": "7.3.10",
              "lessThanOrEqual": "7.3.10-u27",
              "versionType": "maven",
              "status": "affected"
            },
            {
              "version": "7.4.13",
              "lessThanOrEqual": "7.4.13-u1",
              "versionType": "maven",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-04T17:29:24.844041Z",
          "id": "CVE-2025-43772",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43772",
      "source": "[email protected]"
    }
  ]
}