Description (CNA)
The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected by this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Secvisogram / csaf-validator-service | affected 0.0.0 before 0.1.0 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.