What is GHSA-h4m4-xp33-37mj?

GHSA-h4m4-xp33-37mj is a security advisory published by GitHub Security Advisories with Medium severity. Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

Which CVE IDs does GHSA-h4m4-xp33-37mj cover?

GHSA-h4m4-xp33-37mj covers the following CVE IDs: CVE-2025-43770. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-h4m4-xp33-37mj?

GHSA-h4m4-xp33-37mj affects 1 product, including: maven/com.liferay.portal:com.liferay.portal.kernel:\u003c 155.0.0.

GHSA-h4m4-xp33-37mjMedium

Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

Vendor

GitHub Security Advisories

Published

August 23, 2025

Last Modified

August 25, 2025

🔗 CVE IDs covered (1)

CVE-2025-43770 →

📋 Description

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the referer or FORWARD_URL using %00 in those parameters.

🎯 Affected products1

maven/com.liferay.portal:com.liferay.portal.kernel:< 155.0.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2025-43770
https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43770
https://github.com/liferay/liferay-portal/commit/a712758b9c4b6f4c54df5dec7d334279bb30f75a
https://github.com/liferay/liferay-portal/commit/bf20bc07e3e3421d39eaacff052418ce26d791f2
https://liferay.atlassian.net/browse/LPE-18151
https://github.com/advisories/GHSA-h4m4-xp33-37mj