CVE-2025-63561: Vacation Rental Management Platform: denetimsiz kaynak tüketimi

Açıklama (NVD)

Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service (DoS) condition in the HTTP connection handling layer, where an attacker that opens and maintains many slow or partially-completed HTTP connections can exhaust the server’s connection pool and worker capacity, preventing legitimate users and APIs from accessing the service.

Özet bilgiler

Ürün

Summerpearlgroup Vacation Rental Management Platform

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

%0,40 (yüzdelik 35)

CWE

CWE-400

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• CWE-400