Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m6j5-92q7-225w

Опубликовано: 17 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.

The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.

EPSS

Процентиль: 42%
0.002
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
10 месяцев назад

The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.

EPSS

Процентиль: 42%
0.002
Низкий

7.5 High

CVSS3