CVE-2019-25613CWE-940

Easy Chat Server 3.1 Denial of Service via message Parameter

High · published March 22, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter. Attackers can establish a session via the chat.ghp endpoint and then send a POST request to body2.ghp with an excessively large message parameter value to cause the service to crash.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00526 · 43.8th percentile
Weakness
CWE-940 · Improper Verification of Source of a Communication Channel
Published
2026-03-22T13:38Z
EPSS history
Timeline
  • 22 MAR 13:38Z
    Easy Chat Server 3.1 Denial of Service via message Parameter
    cvelistv5