Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m6vw-rcwj-pg9q

Опубликовано: 20 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

EPSS

Процентиль: 26%
0.00333
Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
8 дней назад

(A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...)

CVSS3: 7.5
redhat
9 дней назад

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

CVSS3: 7.5
nvd
9 дней назад

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

CVSS3: 7.5
debian
9 дней назад

A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...

EPSS

Процентиль: 26%
0.00333
Низкий

7.5 High

CVSS3

Дефекты

CWE-770