Lucene search

K
zdiAnonymousZDI-24-841
HistoryJun 21, 2024 - 12:00 a.m.

(0Day) Zope CMFCore Uncontrolled Resource Consumption Denial-of-Service Vulnerability

2024-06-2100:00:00
Anonymous
www.zerodayinitiative.com
2
vulnerability
zope cmfcore
uncontrolled resource consumption
denial-of-service

AI Score

6.7

Confidence

High

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Zope Application Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the contentFilter class. The issue results from uncontrolled resource consumption. An attacker can leverage this vulnerability to create a denial-of-service condition on the server.

AI Score

6.7

Confidence

High