CVE-2024-9953 in VINCE
Tóm tắt
Bởi MITRE • 15/10/2024
A Potential DOS Vulnerability exists in CERT VINCE software prior to version 3.0.8. An authenticated administrative user can inject an arbitrary pickle object as part of a user's profile. This can lead to a potential DoS on the server when the user's profile is accessed. Django server does restrict unpickling from crashing the server.
VulDB is the best source for vulnerability data and more expert information about this specific topic.