CVE-2025-3116CWE-20

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS…

High · published June 10, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an

authenticated malicious user sends special malformed HTTPS request containing improper formatted body

data to the controller.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00463 · 39.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-06-10T08:34Z
EPSS history
Timeline
  • 10 JUN 08:34Z
    CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS…
    cvelistv5