BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 contains a resource exhaustion vulnerability that allows unauthenticated attackers to fill server…
BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 contains a resource exhaustion vulnerability that allows unauthenticated attackers to fill server storage by repeatedly creating anonymous blueprints. Attackers can send large requests to HomeController::doProcessCreateBlueprint() with a 'never' expiration, bypassing purges to fill the disk and deny service.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Blueprintue
- Product
- blueprintue-self-hosted-edition
- CVSS v3.1
- 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness
- CWE-770
- NVD status
- Received
Why it ranks 25 (Notable)
- CVSS v3.1 7.5 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.