N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-43759

CVE-2025-43759: Liferay Portal users are able to add system admin portlets to pages

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows admin users of a virtual instance to add pages that are not in the default/main virtual instance, then any tenant can create a list of all other tenants.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-43759

CVE-2025-43759:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
com.liferay:com.liferay.layout.impl	maven	< 6.0.147	6.0.147

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability allows an administrator of a virtual instance to add portlets to a page without proper authorization, potentially exposing sensitive information. The analysis of the provided patches pinpoints the execute method within the UpdateLayoutStrutsAction class as the vulnerable function.

The commit 2e29e6733bc0e058bef89d16faac542bf2585346 introduces a new method _checkPortletPermission and, crucially, adds a call to this method within the execute function. This demonstrates that the execute method was the entry point for the vulnerable operation and was missing the necessary security validation. The execute method processes the request to add a portlet, and without this check, it would proceed with adding any portlet specified by a virtual instance admin.

The subsequent commit e8cbc7c27e5ed51c4079dd62738713f31afb46f7 further refines the checks within _checkPortletPermission, indicating that the initial fix needed strengthening. However, the core of the vulnerability remains the lack of any check in the execute method, which is what the first patch addresses. Therefore, com.liferay.layout.internal.struts.UpdateLayoutStrutsAction.execute is the function that would be present in a runtime profile when this vulnerability is exploited.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.