Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2xw3-m2wf-5r5m

Опубликовано: 07 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate. An attacker can exploit this behavior to rapidly upload a large volume of files, potentially leading to resource exhaustion such as disk space depletion, increased server load, or degraded performance

In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate. An attacker can exploit this behavior to rapidly upload a large volume of files, potentially leading to resource exhaustion such as disk space depletion, increased server load, or degraded performance

EPSS

Процентиль: 13%
0.00044
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 месяца назад

In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate. An attacker can exploit this behavior to rapidly upload a large volume of files, potentially leading to resource exhaustion such as disk space depletion, increased server load, or degraded performance

EPSS

Процентиль: 13%
0.00044
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770