Lucene search

K
osvGoogleOSV:GO-2024-2430
HistoryJun 28, 2024 - 3:28 p.m.

Authenticated users can crash the CubeFS servers with maliciously crafted requests in github.com/cubefs/cubefs

2024-06-2815:28:53
Google
osv.dev
cubefs servers
authenticated users
crafted requests
github repository
software

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.5%

Authenticated users can crash the CubeFS servers with maliciously crafted requests in github.com/cubefs/cubefs

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.5%

Related for OSV:GO-2024-2430