CVE Intelligence

Maven Com.liferay:com.liferay.portal.workflow.kaleo.runtime.integration.impl vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Com.liferay:com.liferay.portal.workflow.kaleo.runtime.integration.impl: 1 record(s), with affected versions and fixes.

CVE-2025-43782 Medium · 4.3 CWE-639 Sep 11, 2025
Liferay Portal API Allows Authenticated Users to Access Workflow Definitions by Name
Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote authenticated users to access a workflow definition by name via the API