CVE-2024-10344CWE-400

Unauthenticated Denial of Service via Refuse Function

High · published November 11, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was identified. Reported by Karol Więsek.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00490 · 41.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-11-11T14:08Z
EPSS history
Timeline
  • 11 NOV 14:08Z
    Unauthenticated Denial of Service via Refuse Function
    cvelistv5