CVE-2025-43824

Description

The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a users name in the Content-Disposition header, which allows remote authenticated users to change the file extension when a vCard file is downloaded.

Risk Information

Base Score

5.4

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.027

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2025-62265,CVE-2025-43824 are fixed in Liferay - release.portal.bom 7.4.3.112	Windows
Vulnerabilities CVE-2025-62265,CVE-2025-43824 are fixed in Liferay - release.portal.bom for Linux 7.4.3.112	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234