CVE-2025-4655: SSRF Vulnerability in Liferay Portal and Liferay DXP
Summary
CVE-2025-4655: Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery. Affects com.liferay.portal:release.portal.bom versions >= 7.4.0, <= 7.4.3.132. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Liferay Portal and Liferay DXP are popular open-source platforms used for building web applications and managing digital experiences. They provide a robust set of features for content management, collaboration, and workflow automation. However, certain versions of these platforms are vulnerable to a Server-Side Request Forgery (SSRF) attack, which can allow unauthorized access to internal resources.
Vulnerability Detail
An SSRF vulnerability exists in FreeMarker templates within Liferay Portal versions 7.4.0 to 7.4.3.132 and Liferay DXP versions 2025.Q1.0 to 2025.Q1.5, among others. This vulnerability allows template editors to bypass access validations by crafting malicious URLs, potentially leading to unauthorized data exposure or manipulation. The vulnerability arises from insufficient validation of user input in template rendering, which can be exploited by attackers to send requests to internal services.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, restrict access to the template editing functionality to trusted users only, and implement additional validation on user inputs to prevent the exploitation of the SSRF vulnerability.
Conclusion
The SSRF vulnerability in Liferay Portal and Liferay DXP poses a moderate risk to users of affected versions. It is crucial to update to the latest patched versions to mitigate this risk. Users are also encouraged to implement temporary workarounds and monitor their systems for any suspicious activity.
See every vulnerability recorded for com.liferay.portal:release.portal.bom →
FAQ
SSRF (Server-Side Request Forgery) is a type of security vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources, potentially leading to unauthorized access or data exposure.
The affected versions include Liferay Portal 7.4.0 through 7.4.3.132 and Liferay DXP 2025.Q1.0 through 2025.Q1.5, among others.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By simply using your pom.xml, you can check for vulnerabilities without needing to access the code or installation.
If immediate updates are not possible, consider implementing access restrictions and input validation as a temporary workaround to mitigate the risk of exploitation.
Detailed information about this vulnerability can be found in the advisory published on GitHub, as well as through security bulletins from Liferay.
References
Related vulnerabilities
Recent vulnerabilities recorded for com.liferay.portal:release.portal.bom.
