CVE-2025-4655 MEDIUM

CVE-2025-4655

Vendor Liferay
Product Portal
Weakness CWE-918 · SSRF
Published August 9, 2025
Last update August 11, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N

What the vulnerability does

01Description

SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.

Key dates

02Disclosure timeline

August 9, 2025 CVE published
August 11, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-44428 MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience CVE-2025-57818 Firecrawl SSRF Vulnerability via malicious webhook CVE-2026-30834 PinchTab: SSRF with Full Response Exfiltration via Download Handler CVE-2026-48858 ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks CVE-2024-30453 WordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerability