Resource exhaustion in github.com/revel/revel
CVE-2020-36568

7.5HIGH

Key Information:

Vendor: Github.com/revel/revel
Status: Github.com/revel/revel
Vendor: CVE Published:; 27 December 2022

🔔 Create Github.com/revel/revel Vulnerability Alert

What is CVE-2020-36568?

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

github.com/revel/revel 0 < 1.0.0

References

https://github.com/revel/revel/pull/1427

https://github.com/revel/revel/commit/d160ecb72207824005b...

https://github.com/revel/revel/issues/1424

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Dec 27, 2022
Vulnerability Reserved
Jul 29, 2022

Credit

@SYM01

JSON

Github.com/revel/revel

What is CVE-2020-36568?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Credit

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.