CVEvulnerability

CVE-2025-0638

7.5 HIGH Published 2025-01-22 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-01-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-1286

Description

The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.

Related

Weakness · CWE (1)

  • CWE-1286 Improper Validation of Syntactic Correctness of Input weakness

References