https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:52:29.550500+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-43768 CVE-2025-43768 2026-10-08T16:52:29.567210+00:00

Affected: Liferay Portal, Liferay DXP

Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to access sensitive information of admin users using JSONWS APIs.