CVE-2025-14341CWE-770CWE-915denial-of-service

CVE-2025-14341

High · published May 7, 2026

CVSS v3.1
8.3
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Excessive Allocation, Flooding.

This issue affects DivvyDrive: from 4.8.2.19 before 4.8.3.2.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00221 · 12.0th percentile
Weaknesses
CWE-770 · Allocation of Resources Without Limits or Throttling; CWE-915 · Improperly Controlled Modification of Dynamically-Determined Object Attributes
Published
2026-05-07T18:16Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0182 · [email protected]
EPSS history
Timeline
  • 07 MAY 13:13Z
    Input Data Manipulation in DivvyDrive Information Technologies' DivvyDrive
    cvelistv5