CVE-2025-3898CWE-20

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing…

High · published June 10, 2025

CVSS v4.0
7.1
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an

authenticated malicious user sends HTTPS request containing invalid data type to the webserver.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00531 · 44.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-06-10T08:22Z
EPSS history
Timeline
  • 10 JUN 08:22Z
    CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing…
    cvelistv5