CVE-2024-6427
Uncontrolled Resource Consumption vulnerability in MESbook
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Uncontrolled Resource Consumption vulnerability in MESbook
| Assigner | INCIBE |
| Reserved | 2024-07-01 |
| Published | 2024-07-03 |
| Updated | 2024-08-01 |
Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can use the "message" parameter to inject a payload with dangerous JavaScript code, causing the application to loop requests on itself, which could lead to resource consumption and disable the application.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CWE-400 Uncontrolled Resource Consumption
David Utón Amaya (m3n0sd0n4ld)
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-mesbook
