CVE-2025-0189: falha de alta gravidade em aimhubio/aim
Denial of Service in aimhubio/aim
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.6%
In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size for websocket messages, allowing very large images to be tracked. This causes the server to become unresponsive to other requests while processing the large image, leading to a denial of service condition.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
aimhubio · aimhubio/aimCVEs relacionadas — aimhubio/aim
No mesmo produto, das mais perigosas para as menos.
CVE-2024-6396CRITICALArbitrary File Overwrite and Data Exfiltration in aimhubio/aimEPSS 53.1%CVE-2024-2195CRITICALRemote Code Execution in aimhubio/aimEPSS 1.8%CVE-2024-6851HIGHArbitrary File Deletion in aimhubio/aimEPSS 1.1%CVE-2024-8769CRITICALArbitrary File Deletion via Relative Path Traversal in aimhubio/aimEPSS 0.9%CVE-2024-6483MEDIUMArbitrary File/Directory Deletion in aimhubio/aimEPSS 0.9%CVE-2024-6829CRITICALArbitrary File Overwrite through tarfile-extraction in aimhubio/aimEPSS 0.9%