CVE-2025-43739

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allow any authenticated user to modify the content of emails sent through the calendar portlet, allowing an attacker to send phishing emails to any other user in the same organization.

List of 59 websites affected by CVE-2025-43739

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
***************.*.it	Italy	,*
*****.es	Spain	,*
**.*.it	Italy	,*
****..*.it	Italy	*,*
**********.***.************.it	Italy	*,*
***..*.it	Italy	*,*
**************.de	Germany	*,*
*********.***.pl	Poland	*,*
..***.br	Brazil	*,*
*****.pt	Portugal	,,*
**********.**.org	Germany	,,*
***..*.br	Brazil	,,*
************.*.bh	Bahrain	,,*
*********************.com	Germany	,,*
****.*.co	Netherlands	,,*
**********.org	Brazil	,,*
***..***.gov	United States	,,*
***********.cat	Spain	,,*
*****.es	Spain	,,*
****.es	Spain	,,*