4 matches found
Denial Of Service (DoS)
github.com/openziti/zrok is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation of an attacker-supplied cookie chunk count in the endpoints.GetSessionCookie function, which performs unbounded memory allocations before token validation, allowing an unauthenticated...
7.5CVSS8.2AI score0.0059EPSS
SaveExploits0References2Affected Software1
20