A vulnerability, which was classified as problematic, has been found in Liferay Portal and DXP. This vulnerability affects unknown code of the component Kaleo Designer Portlet. The manipulation of the argument Role Name Search leads to inefficient regular expression complexity.
This vulnerability is listed as CVE-2025-43764. The attack may be initiated remotely. There is no available exploit.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2025-43764 | Liferay Portal/DXP Kaleo Designer Portlet Role Name Search redos (EUVD-2025-25629)
A vulnerability, which was classified as problematic, has been found in Liferay Portal and DXP. This vulnerability affects unknown code of the component Kaleo Designer Portlet. The manipulation of the argument Role Name Search leads to…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR