Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h22p-qvm6-c9p5

Опубликовано: 27 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a DoS of the process answering the current request while having no effect on other requests.

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a DoS of the process answering the current request while having no effect on other requests.

EPSS

Процентиль: 51%
0.00285
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
nvd
почти 3 года назад

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected by this vulnerability.

EPSS

Процентиль: 51%
0.00285
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20