Security Advisory

CVE-2024-34084

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-07 14:12:19

Last updated 2024-08-02 02:42:59

Assigner GitHub_M

State PUBLISHED

Description

Minders `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48.

← Browse all CVEs View on cve.org ↗