Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-25072
HistoryDec 27, 2022 - 10:15 p.m.

Cross site request forgery (csrf)

2022-12-2722:15:00
PRIOn knowledge base
www.prio-n.com
6
gzip support
malicious server
denial of service

0.001 Low

EPSS

Percentile

41.0%

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.

CPENameOperatorVersion
tendermintlt0.31.1

0.001 Low

EPSS

Percentile

41.0%