Denial of Service Vulnerability in Middleware by RS

CVE-2025-47908

What is CVE-2025-47908?

A vulnerability in RS Middleware allows attackers to exploit a flaw in the handling of malicious preflight requests. When an Access-Control-Request-Headers (ACRH) header with excessive commas is processed, it leads to excessive heap allocations. This behavior can be manipulated to generate significant load on the server, resulting in potential service disruptions and unavailability for legitimate users.

References