Liferay Portal versions 7.4.0 through 7.4.3.132 and Liferay DXP versions 2025.Q1.0 through 2025.Q1.10, among others, are vulnerable to an Insecure Direct Object Reference (IDOR) in the groupId parameter of the RolesSelectorPortlet. This vulnerability allows an organization administrator to modify the parameter id value, potentially granting unauthorized access to user lists from other organizations.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.8 | CVE-2025-43732 |
Exploitation
To exploit this vulnerability, an attacker with administrative privileges can manipulate the groupId parameter in the RolesSelectorPortlet. By changing this parameter, they can access user lists from other organizations, leading to potential data exposure and unauthorized access.
Affected Products
- Liferay Portal 7.4.0 through 7.4.3.132: A web platform for building digital experiences.
- Liferay DXP 2025.Q1.0 through 2025.Q1.10: A digital experience platform for creating and managing web applications.
- Liferay DXP 2024.Q4.0 through 2024.Q4.7: A version of the DXP with similar vulnerabilities.
Mitigation
To mitigate this vulnerability, organizations should ensure that proper access controls are in place and restrict administrative privileges to trusted users only. Additionally, updating to the latest version of Liferay that addresses this vulnerability is recommended.