Логотип exploitDog
bind:CVE-2024-34084
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-34084

Количество 2

Количество 2

nvd логотип

CVE-2024-34084

почти 2 года назад

Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-9c5w-9q3f-3hv7

почти 2 года назад

Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requests

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-34084

Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48.

CVSS3: 7.5
0%
Низкий
почти 2 года назад
github логотип
GHSA-9c5w-9q3f-3hv7

Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requests

CVSS3: 7.5
0%
Низкий
почти 2 года назад

Уязвимостей на страницу