CVE-2025-4604 Information

Aug 05, 2025 cve

Description

The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132 and Liferay DXP 2024.Q1.1 through 2024.Q1.19 2024.Q2.0 through 2024.Q2.13 2024.Q3.0 through 2024.Q3.13 2024.Q4.0 through 2024.Q4.7 2025.Q1.0 through 2025.Q1.15 and 7.4 update 80 through update 92 and then attackers can run scripts in the Gogo shell

Reference

https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-4604

CNNVD-202508-265 (Published: 2025-08-04)

Share on: