WID-SEC-W-2024-3534

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Red Hat Trusted Profile Analyzer: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2024-11-24

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Trusted Profile Analyzer ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-45590UShigh7.5Exploit
body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted pay…
CVE-2024-45296US——
path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Bec…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan