Логотип exploitDog
bind:CVE-2022-31054
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-31054

Количество 2

Количество 2

nvd логотип

CVE-2022-31054

больше 3 лет назад

Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service. A patch for this vulnerability has been released in Argo Events version 1.7.1.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-5q86-62xr-3r57

больше 3 лет назад

Uses of deprecated API can be used to cause DoS in user-facing endpoints

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-31054

Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service. A patch for this vulnerability has been released in Argo Events version 1.7.1.

CVSS3: 7.5
1%
Низкий
больше 3 лет назад
github логотип
GHSA-5q86-62xr-3r57

Uses of deprecated API can be used to cause DoS in user-facing endpoints

CVSS3: 7.5
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу