Volerion logoVolerion
Volerion logoVolerion

Liferay Portal and DXP Server-Side Request Forgery Vulnerability in FreeMarker Templates

Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in FreeMarker templates within Liferay Portal versions 7.4.0 through 7.4.3.132, as well as Liferay DXP versions 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, and 2024.Q1.1 through 2024.Q1.15. This vulnerability allows template editors to bypass access validations by using crafted URLs.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of server resources, as template editors could bypass access validations and potentially make requests to internal services or resources.

Remediation

Users can upgrade to Liferay Portal's master branch or Liferay DXP versions 2024.Q2.0, 2024.Q1.16, or 2025.Q1.6 to address this vulnerability.

Added: Aug 9, 2025, 5:18 AM
Updated: Aug 9, 2025, 5:18 AM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
0.6
exploitability
4.8
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.