Lucene search
Veracode Vulnerability DatabaseVERACODE:36614HistoryAug 05, 2022 - 4:25 p.m.
Denial Of Service (DOS)
2022-08-0516:25:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
56.5%
Raneto is vulnerable to Denial of Service. The vulnerability is due to the GET search endpoint located at app/routes/search.route.js. An unauthenticated attacker can supply a malicious search query, crashing the program.
References
raneto.com/
cwe.mitre.org/data/definitions/703.html
gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/
github.com/gilbitron/Raneto/commit/7ee6ae89cbdcc77156f29b1ef86343b85cbce922
github.com/gilbitron/Raneto/pull/370
github.com/gilbitron/Raneto/releases
github.com/gilbitron/Raneto/releases/tag/0.17.1
Related
cvelist
cvelist
CVE-2022-35142
2022-08-04 19:37:12
cve
cve
CVE-2022-35142
2022-08-04 20:15:19
prion
prion
Design/Logic Flaw
2022-08-04 20:15:00
github
github
nvd
nvd
CVE-2022-35142
2022-08-04 20:15:19
osv
osv
Raneto v0.17.0 employs weak password complexity requirements
2022-08-05 00:00:23
Raneto vulnerable to Cross-site Scripting
2022-08-05 00:00:23