CVE-2025-43796

Liferay Portal 7.4.0 through 7.4.3.101, and Liferay DXP 2023.Q3.0 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA though update 35 does not limit the number of objects returned from a GraphQL queries, which allows remote attackers to perform denial-of-service DoS attacks on the application...

PT-2025-37343

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.0 through 7.4.3.101 Liferay DXP versions 2023.Q3.0 through 2023.Q3.4 Liferay Portal versions 7.4 GA through update 92 Liferay Portal versions 7.3 GA through update 35 Description: The software does not limit the...

PT-2020-13456 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.1.10 GitLab versions prior to 13.2.8 GitLab versions prior to 13.3.4 Description: A denial of service issue was discovered due to the profile activity page not restricting the amount of results one could request...