Description (CNA)
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker sends a specially crafted site creation request to the createSite endpoint. A single request is sufficient to take the entire application offline, requiring a manual server restart to restore service. Version 26.0.0 fixes the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| haxtheweb / haxcms-nodejs | affected < 26.0.0 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.