Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hqc5-cqqv-7gwf

Опубликовано: 25 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 5.3

Описание

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates unrecovered goroutines and halts unrelated work in long-lived processes.

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates unrecovered goroutines and halts unrelated work in long-lived processes.

EPSS

Процентиль: 14%
0.00233
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-248

Связанные уязвимости

CVSS3: 5.3
ubuntu
23 дня назад

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates unrecovered goroutines and halts unrelated work in long-lived processes.

CVSS3: 5.3
redhat
23 дня назад

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates unrecovered goroutines and halts unrelated work in long-lived processes.

CVSS3: 5.3
nvd
23 дня назад

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates unrecovered goroutines and halts unrelated work in long-lived processes.

CVSS3: 5.3
debian
23 дня назад

rclone before v1.75.0 contains a denial of service vulnerability in th ...

EPSS

Процентиль: 14%
0.00233
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-248