Design/Logic Flaw

2018-05-0904:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_html/logs/not_found.log grows without bound, and is loaded into memory for each request.

CPENameOperatorVersion
litecartlt2.1.2

CPE	Name	Operator	Version
	litecart	lt	2.1.2

References

github.com/litecart/litecart/issues/119