CVE-2025-43816

A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2024.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows an attacker to cause server unavailability (denial of service) via repeatedly calling the API endpoint.

List of 71 websites affected by CVE-2025-43816

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
**.*.it	Italy	,*
***..***.br	Brazil	*,*
***.it	Italy	*,*
*****.org	Singapore	*,*
*******.org	Spain	*,*
****..*.it	Italy	*,*
***..*.it	Italy	*,*
**************.de	Germany	*,*
*********.***.pl	Poland	*,*
..***.br	Brazil	*,*
*******.net	Italy	*,*
*****.*.vn	Vietnam	,,*
*****.pt	Portugal	,,*
******.pl	Poland	,,*
**********.**.org	Germany	,,*
***..*.br	Brazil	,,*
************.*.bh	Bahrain	,,*
*********************.com	Germany	,,*
****.*.co	Colombia	,,*
*.****.pl	Poland	,,*