Lucene search
Veracode Vulnerability DatabaseVERACODE:38833HistoryJan 11, 2023 - 6:43 a.m.
Denial Of Service (DoS)
2023-01-1106:43:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
vulnerability
query parser
github.com/revel/revel
denial of service
resource exhaustion
remote attackers
unbounded memory allocation
0.005 Low
EPSS
Percentile
77.4%
github.com/revel/revel is vulnerable to denial of service attacks. Unsanitized input in the query parser in bindSlice function allows remote attackers to cause resource exhaustion via unbounded memory allocation resulting in denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/revel/revel | le | v0.21.0 | |
| github.com/revel/revel | le | v0.21.0 |
Related
osv
osv
Resource exhaustion in github.com/revel/revel
2021-04-14 20:04:52
CVE-2020-36568
2022-12-27 22:15:11
revel is vulnerable to resource exhaustion
2022-12-28 00:30:23
nvd
nvd
CVE-2020-36568
2022-12-27 22:15:11
ubuntucve
ubuntucve
CVE-2020-36568
2022-12-27 00:00:00
debiancve
debiancve
CVE-2020-36568
2022-12-27 22:15:11
github
github
revel is vulnerable to resource exhaustion
2022-12-28 00:30:23
prion
prion
Memory corruption
2022-12-27 22:15:00
cvelist
cvelist
CVE-2020-36568 Resource exhaustion in github.com/revel/revel
2022-12-27 21:12:40
cve
cve
CVE-2020-36568
2022-12-27 22:15:11