Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-62190
HistoryJun 22, 2022 - 12:00 a.m.

InvenTree Denial of Service Vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
15

0.001 Low

EPSS

Percentile

37.9%

InvenTree is an open source inventory management system from InvenTree open source . InvenTree versions prior to 0.8.0 contain a denial of service vulnerability that stems from the fact that the annotation feature does not include a character limit, which can be exploited by an attacker to submit an unlimited number of characters to the annotation section, which can result in a denial of service and increase the victim’s processor usage.

CPENameOperatorVersion
inventree inventreelt0.8.0

0.001 Low

EPSS

Percentile

37.9%

Related for CNVD-2022-62190