CVE-2024-25143 Information
Feb 08, 2024
cve
Description
The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6 and older unsupported versions and Liferay DXP 7.3 before service pack 3 7.2 before fix pack 13 and older unsupported versions does not limit resource consumption when generating a preview image which allows remote authenticated users to cause a denial of service (memory consumption) via crafted PNG images.