Liferay Portal versions 7.4.0 through 7.4.3.132 and Liferay DXP versions 2025.Q1.0 through 2025.Q1.1, among others, allow remote unauthenticated users to upload files via the form attachment field without proper validation. This vulnerability enables extension obfuscation and bypassing of MIME type checks, posing a security risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-43750 |
Exploitation
To exploit this vulnerability, an attacker can take advantage of the lack of proper validation in the file upload functionality. By uploading malicious files as a guest user, the attacker can obfuscate extensions and bypass MIME type checks, potentially leading to further exploitation of the system.
Affected Products
- Liferay Portal 7.4.0 through 7.4.3.132: A web platform for building digital experiences.
- Liferay DXP 2025.Q1.0 through 2025.Q1.1: A digital experience platform for creating and managing web applications.
- Liferay DXP 2024 versions: Various updates from Q1 to Q4 that are also affected.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest versions of Liferay Portal and Liferay DXP that address this issue. Additionally, implementing strict validation checks on file uploads can help prevent unauthorized file uploads.