Threats tagged 'ghsa-vgqx-447m-wvcj'

Liferay Portal versions 7.4.0 through 7.4.3.99 are vulnerable to a denial-of-service (DoS) attack via crafted Headless API requests that return an excessive number of objects. This flaw allows remote attackers to overwhelm the application by exploiting the lack of limits on returned objects. The vulnerability has a high severity score and is fixed in version 7.4.3.100.