CVE-2022-3371

2022-09-3014:15:10

CWE-770

[email protected]

web.nvd.nist.gov

github

resource allocation

vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.8%

JSON

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

Affected configurations

Nvd

Node

ikus-softrdiffwebRange≤2.4.9

ikus-softrdiffwebMatch2.5.0alpha1

ikus-softrdiffwebMatch2.5.0alpha2

VendorProductVersionCPE
ikus-softrdiffweb*cpe:2.3:a:ikus-soft:rdiffweb:*:*:*:*:*:*:*:*
ikus-softrdiffweb2.5.0cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha1:*:*:*:*:*:*
ikus-softrdiffweb2.5.0cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha2:*:*:*:*:*:*

Vendor	Product	Version	CPE
ikus-soft	rdiffweb	*	cpe:2.3:a:ikus-soft:rdiffweb::::::::
ikus-soft	rdiffweb	2.5.0	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha1::::::
ikus-soft	rdiffweb	2.5.0	cpe:2.3:a:ikus-soft:rdiffweb:2.5.0:alpha2::::::