Description

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.

Remediation

References

http://raneto.com/

https://cwe.mitre.org/data/definitions/703.html

https://gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/

https://github.com/gilbitron/Raneto/releases

Related Vulnerabilities

CVE-2019-10779 Vulnerability in maven package stroom:stroom-app

CVE-2021-23561 Vulnerability in npm package comb

CVE-2022-43408 Vulnerability in maven package org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view

CVE-2017-16008 Vulnerability in maven package org.webjars:i18next

CVE-2020-5245 Vulnerability in maven package io.dropwizard:dropwizard-validation

Severity

High

Classification

CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Product Third Party Advisory Exploit Patch