Lucene search

K
cvelistMitreCVELIST:CVE-2024-30156
HistoryMar 24, 2024 - 12:00 a.m.

CVE-2024-30156

2024-03-2400:00:00
mitre
www.cve.org
1
varnish cache
varnish enterprise
http/2
broke window attack
cve-2024-30156

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%