Логотип exploitDog
bind:CVE-2024-32874
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-32874

Количество 2

Количество 2

nvd логотип

CVE-2024-32874

больше 1 года назад

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Below 0.13.2 Release, when uploading a file or retrieving the filename, a user may intentionally use a large Unicode filename which would lead to a application-level denial of service. This is due to no limitation set on the length of the filename and the costy use of the Unicode normalization with the form NFKD under the hood of `secure_filename()`.

CVSS3: 6.8
EPSS: Низкий
github логотип

GHSA-w4h6-9wrp-v5jq

больше 1 года назад

Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

CVSS3: 9.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-32874

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Below 0.13.2 Release, when uploading a file or retrieving the filename, a user may intentionally use a large Unicode filename which would lead to a application-level denial of service. This is due to no limitation set on the length of the filename and the costy use of the Unicode normalization with the form NFKD under the hood of `secure_filename()`.

CVSS3: 6.8
0%
Низкий
больше 1 года назад
github логотип
GHSA-w4h6-9wrp-v5jq

Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

CVSS3: 9.3
0%
Низкий
больше 1 года назад

Уязвимостей на страницу