Lucene search
MitreCVELIST:CVE-2022-37034HistoryFeb 01, 2023 - 12:00 a.m.
CVE-2022-37034
2023-02-0100:00:00
mitre
www.cve.org
1
dotcms
tempresource
tomcat request-thread exhaustion
denial of service
0.001 Low
EPSS
Percentile
30.3%
In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file. If done repeatedly, this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests.
References
Related
cve
cve
CVE-2022-37034
2023-02-01 23:15:09
prion
prion
Denial of service
2023-02-01 23:15:00
osv
osv
CVE-2022-37034
2023-02-01 23:15:09
nvd
nvd
CVE-2022-37034
2023-02-01 23:15:09