Yüksek CVSS 7.5
CVE-2025-67419: Evershop: güvenlik açığı
Açıklama (NVD)
A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the application server's resources via the "GET /images" API. The application fails to limit the height of the use-element shadow tree or the dimensions of pattern tiles during the processing of SVG files, resulting in unbounded resource consumption and system-wide denial of service.
Özet bilgiler
- Ürün
- Evershop Evershop
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,35 (yüzdelik 28)
- CWE
- CWE-1050
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| evershop-evershop | — | 2.1.0 | — |