2 matches found
PT-2024-20593 · Nginx +1 · Nginx +1
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest stable, beta and tests-passed version Description: The issue affects Discourse, an open source platform for community discussion, due to the lack of a rate limit on the "POST /uploads" endpoint. This mak...
5.3CVSS6.7AI score0.00593EPSS
SaveExploits0References6
UBUNTU-CVE-2016-4450
os/unix/ngxfiles.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service NULL pointer dereference and worker process crash via a crafted request, involving writing a client request body to a temporary file...
7.5CVSS7.2AI score0.16376EPSS
SaveExploits0References4
20