Количество 2
Количество 2
CVE-2024-34084
Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48.
GHSA-9c5w-9q3f-3hv7
Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requests
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-34084 Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48. | CVSS3: 7.5 | 0% Низкий | почти 2 года назад | |
GHSA-9c5w-9q3f-3hv7 Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requests | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
Уязвимостей на страницу