idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.
References
Link | Resource |
---|---|
https://github.com/idreamsoft/iCMS/issues/83 | Third Party Advisory |
Configurations
Information
Published : 2019-10-14 09:15
Updated : 2020-08-24 10:37
NVD link : CVE-2019-17583
Mitre link : CVE-2019-17583
JSON object : View
CWE
CWE-770
Allocation of Resources Without Limits or Throttling
Products Affected
idreamsoft
- icms