CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file

2024-02-2209:51:43

CWE-434

apache

www.cve.org

apache answer

pixel flood attack

unrestricted upload

file vulnerability

out of memory

image upload

upgrade

cve-2024-22393

AI Score

6.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1.

Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content.
Users are recommended to upgrade to version [1.2.5], which fixes the issue.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Answer",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.2.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]