Vulnerability Description
An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://gist.github.com/mcollina/f06af2098665e4bb8372104425f3999e
- https://gist.github.com/pengwGit/cd3c1701a9e05b424fa6c60d86845de4
- https://github.com/moscajs/aedes/issues/1024
- https://github.com/moscajs/aedes/issues/1024#issuecomment-2671695219
- https://github.com/moscajs/aedes/releases/tag/v0.51.2
FAQ
What is CVE-2024-48080?
CVE-2024-48080 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in t...
How severe is CVE-2024-48080?
CVE-2024-48080 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-48080?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.