【中文导读】该 CVE 涉及信息泄露、拒绝服务、内存泄漏（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2024.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows an attacker to cause server unavailability (denial of service) via repeatedly calling the API endpoint.