Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hh36-f69g-hq4h

Опубликовано: 31 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.

EPSS

Процентиль: 0%
0.00003
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
ubuntu
1 день назад

[Unknown description]

CVSS3: 6.5
nvd
2 дня назад

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.

CVSS3: 6.5
debian
2 дня назад

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (defa ...

EPSS

Процентиль: 0%
0.00003
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863