Lucene search
+L

4 matches found

Vulnrichment
Vulnrichment
added 2025/06/03 8:54 p.m.18 views

CVE-2025-49000 InvenTree has uncontrolled memory allocation via built-in label-sheet plugin

InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in label-sheet plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated label-printing user trigger a...

3.5CVSS3.7AI score0.00334EPSS
SaveExploits0References3
Rows per page
Query Builder