Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-0190

Опубликовано: 20 мар. 2025
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
EPSS Низкий

Описание

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of Text objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:aimstack:aim:3.25.0:*:*:*:*:*:*:*

EPSS

Процентиль: 34%
0.00136
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-1049
NVD-CWE-Other

Связанные уязвимости

CVSS3: 7.5
github
11 месяцев назад

Aim Excessive Data Query Operations in a Large Data Table vulnerability

EPSS

Процентиль: 34%
0.00136
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-1049
NVD-CWE-Other