Denial Of Service (DoS)

2022-10-1703:14:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

rdiffweb

vulnerability

denial of service

check_ratelimit

function

request limit

EPSS

0.002

Percentile

60.5%

JSON

rdiffweb is vulnerable to denial of service. The vulnerability is due to the function check_ratelimit in ratelimit.py missing a maximum number of requests per hour on sensitive endpoints allowing an attacker to cause an application crash via malicious input.