CVE-2025-8696CWE-779CWE-789

CVE-2025-8696

High · published September 10, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server.

This issue affects Stork versions 1.0.0 through 2.3.0.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00461 · 39.0th percentile
Weaknesses
CWE-779 · Logging of Excessive Data; CWE-789 · Memory Allocation with Excessive Size Value
Published
2025-09-10T22:15Z
References (2)
https://kb.isc.org/docs/cve-2025-8696 · [email protected]http://www.openwall.com/lists/oss-security/2025/09/10/5 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 10 SEP 17:59Z
    DoS attack against the Stork UI from an unauthenticated user
    cvelistv5