PT-2023-10827 · Unknown · Arborator Server

Published 2023-06-06 · Updated 2024-05-17 · CVE-2018-25087

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Arborator Server (affected versions not specified)

Description A problematic vulnerability was found in Arborator Server, affecting the function start of the file project.cgi. The manipulation of the project argument leads to denial of service. The product uses continuous delivery with rolling releases, so no version details of affected or updated releases are available.

Recommendations Apply a patch to fix this issue. As a temporary workaround, consider restricting the manipulation of the project argument in the project.cgi file until a patch is available.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2018-25087

Affected Products

Arborator Server

References · 6

• https://github.com/Arborator/arborator-server/commit/cdbdbcbd491db65e9d697ab4365605fdfab1a604 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-25087 · Security Note
• https://osv.dev/vulnerability/CVE-2018-25087 · Vendor Advisory
• https://vuldb.com/?id.230662 · Note
• https://t.me/cvenotify/51836 · Telegram Post
• https://vuldb.com/?ctiid.230662 · Note