Описание
The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected by this vulnerability.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.1.0 (исключая)
cpe:2.3:a:csaf-validator-lib_project:csaf-validator-lib:*:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.00285
Низкий
7.5 High
CVSS3
Дефекты
CWE-20
CWE-20
Связанные уязвимости
CVSS3: 5.3
github
почти 3 года назад
The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a DoS of the process answering the current request while having no effect on other requests.
EPSS
Процентиль: 51%
0.00285
Низкий
7.5 High
CVSS3
Дефекты
CWE-20
CWE-20