CVE-2024-48080

Published: Dec 3, 2024Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js.

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (5)

https://gist.github.com/mcollina/f06af2098665e4bb8372104425f3999e

Source: cve@mitre.org

https://gist.github.com/pengwGit/cd3c1701a9e05b424fa6c60d86845de4

Source: cve@mitre.org

https://github.com/moscajs/aedes/issues/1024

Source: cve@mitre.org

https://github.com/moscajs/aedes/issues/1024#issuecomment-2671695219

Source: cve@mitre.org

https://github.com/moscajs/aedes/releases/tag/v0.51.2

Source: cve@mitre.org

Timeline

No history available yet.