Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7w3m-9pfq-8m82

Опубликовано: 04 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization. This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS).  There is no control plane exposure; this is a data plane issue only.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization. This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS).  There is no control plane exposure; this is a data plane issue only.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 16%
0.00053
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 5.3
nvd
11 месяцев назад

In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization. This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS).  There is no control plane exposure; this is a data plane issue only.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 5.3
fstec
11 месяцев назад

Уязвимость модуля Java Language сервера приложений Nginx Unit, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 16%
0.00053
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-835