Veracode Vulnerability DatabaseVERACODE:41441Denial Of Service (DoS)
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
21.1%
ethyca_fides is vulnerable to Denial Of Service (DoS). The vulnerability exists due to a lack of validation in the template upload feature, which allows an attacker with with the CONNECTOR_TEMPLATE_REGISTER scope to upload a malicious zip bomb file, causing the fides webserver to run out of resources and become unavailable to all users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ethyca-fides | le | 2.15.2b0 | |
| ethyca-fides | le | 2.15.2b0 |
Related
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
21.1%