CVE-2025-43754
MEDIUMDescription
Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows attackers to determine if an account exist in the application by inspecting the server processing time of the login request.
Is your site exposed to CVE-2025-43754?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | digital_experience_platform |
| liferay | liferay_portal |
References
Frequently Asked Questions
What is CVE-2025-43754? +
How severe is CVE-2025-43754? +
What products are affected by CVE-2025-43754? +
How do I check if I'm vulnerable to CVE-2025-43754? +
Related Vulnerabilities
Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing (VSS) scheme. In versions 0.8.0b2 …
When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially …
PyQuorum is a cryptographic library for secret sharing and key management. Prior to 0.2.1, the mul_mod function implements multiplication via …
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash …
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash …
SignXML is an implementation of the W3C XML Signature standard in Python. When verifying signatures with X509 certificate validation turned …