LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_html/logs/not_found.log grows without bound, and is loaded into memory for each request.
References
Link | Resource |
---|---|
https://github.com/litecart/litecart/issues/119 | Patch Third Party Advisory |
Configurations
Information
Published : 2018-05-08 21:29
Updated : 2018-06-12 11:49
NVD link : CVE-2018-10827
Mitre link : CVE-2018-10827
JSON object : View
CWE
CWE-400
Uncontrolled Resource Consumption
Products Affected
litecart
- litecart