CVE-2025-43768 | Liferay Portal/DXP JSONWS API insertion of sensitive information into sent data

A vulnerability was found in Liferay Portal and DXP and classified as problematic. The affected element is an unknown function of the component JSONWS API. Such manipulation leads to insertion of sensitive information into sent data.

This vulnerability is documented as CVE-2025-43768. The attack can be executed remotely. There is not any exploit available.