What is GHSA-6hj4-v2qp-cqr2?

GHSA-6hj4-v2qp-cqr2 is a security advisory published by GitHub Security Advisories with Medium severity. Liferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect

Which CVE IDs does GHSA-6hj4-v2qp-cqr2 cover?

GHSA-6hj4-v2qp-cqr2 covers the following CVE IDs: CVE-2025-43767. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-6hj4-v2qp-cqr2?

GHSA-6hj4-v2qp-cqr2 affects 1 product, including: maven/com.liferay:com.liferay.info.impl:\u003c 5.0.69.

GHSA-6hj4-v2qp-cqr2Medium

Liferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect

Vendor

GitHub Security Advisories

Published

August 23, 2025

Last Modified

August 25, 2025

🔗 CVE IDs covered (1)

CVE-2025-43767 →

📋 Description

Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 92 allows an attacker to exploit this security vulnerability to redirect users to a malicious site.

🎯 Affected products1

maven/com.liferay:com.liferay.info.impl:< 5.0.69

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2025-43767
https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43767
https://github.com/liferay/liferay-portal/commit/04d6892c12f8c3d12085124b6cb856dfacb9bb89
https://liferay.atlassian.net/browse/LPE-18139
https://github.com/advisories/GHSA-6hj4-v2qp-cqr2