Allocation of Resources Without Limits or Throttling

Overview com.liferay.portal:com.liferay.portal.impl is a package part of Liferay. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ComboServlet. An attacker can exhaust system resources and disrupt service availability by sending...

Use of Default Credentials

Overview com.liferay.portal:com.liferay.portal.impl is a package part of Liferay. Affected versions of this package are vulnerable to Use of Default Credentials due to the API not restricting access before a user has changed their initial password. An attacker can gain unauthorized access and...