Beveiligingsadvies

CVE-2024-9953

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-14 21:19:26

Laatst bijgewerkt 2025-03-20 18:58:47

Toegewezen door certcc

CVSS-score 4.9

Status PUBLISHED

Beschrijving

A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profile, which may lead to a DoS condition when the profile is accessed. While the Django server restricts unpickling to prevent server crashes, this vulnerability could still disrupt operations.

← Alle CVE's bekijken Bekijk op cve.org ↗