CVEvulnerability
CVE-2024-58306
8.7 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-12-11
- Last modified
- 2026-10-27
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-400
Description
minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://minalic.sourceforge.net/ minalic.sourceforge.net
- https://www.exploit-db.com/exploits/51917 www.exploit-db.com
- https://www.vulncheck.com/advisories/minalic-denial-of-service-vulnerability-via-large-get-request www.vulncheck.com