CVE-2025-4581: Liferay Portal and Liferay DXP Vulnerable to Server-Side Request Forgery
Summary
CVE-2025-4581: Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery. Affects com.liferay.portal:release.portal.bom versions >= 7.4.0, <= 7.4.3.132. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Liferay Portal is a popular open-source platform for building web applications and managing content. It provides a robust framework for developing enterprise-level applications, offering features such as user management, content management, and collaboration tools. Liferay DXP is an enhanced version of Liferay Portal, tailored for digital experience management. Both platforms have been found to be vulnerable to a Server-Side Request Forgery (SSRF) issue, which can lead to unauthorized access to internal systems.
Vulnerability Detail
The vulnerability arises from improper validation of user-supplied URLs in the portal-settings-authentication-opensso-web component of Liferay Portal and Liferay DXP. This flaw allows an attacker to exploit the system by forcing it to make arbitrary HTTP requests to internal resources, potentially leading to internal network enumeration or further exploitation. The affected versions include Liferay Portal 7.4.0 through 7.4.3.132 and various versions of Liferay DXP from 2024.Q1.0 to 2025.Q1.4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If immediate patching is not feasible, consider implementing network-level restrictions to limit access to internal systems from the application server. This can help mitigate the risk of SSRF attacks until the vulnerability is resolved.
Conclusion
In summary, Liferay Portal and Liferay DXP are vulnerable to a Server-Side Request Forgery issue that can lead to serious security risks. It is crucial for users to update their systems to the latest patched versions to mitigate this vulnerability and protect their internal networks.
See every vulnerability recorded for com.liferay.portal:release.portal.bom →
FAQ
SSRF is a security vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources, potentially leading to unauthorized access or data leakage.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By simply uploading your pom.xml file to the Vulert playground, you can check for vulnerabilities without any signup.
Exploitation of this vulnerability could allow attackers to access sensitive internal systems, leading to data breaches, unauthorized access, or further exploitation of the network.
Yes, implementing network-level restrictions can help limit access to internal systems from the application server, reducing the risk of SSRF attacks.
Affected versions include Liferay Portal 7.4.0 through 7.4.3.132 and Liferay DXP versions from 2024.Q1.0 to 2025.Q1.4.
References
Related vulnerabilities
Recent vulnerabilities recorded for com.liferay.portal:release.portal.bom.
