PT-2024-15542 · Unknown · Jasper Httpdx

Fernando.Mengali · Published 2024-01-11 · Updated 2024-05-17 · CVE-2024-0419

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Jasper httpdx versions up to 1.5.4

Description A vulnerability was found in the HTTP POST Request Handler component of Jasper httpdx, which can be exploited to cause a denial of service. The attack may be initiated remotely.

Recommendations For Jasper httpdx versions up to 1.5.4, update to a version later than 1.5.4 to resolve the issue. As a temporary workaround, consider restricting access to the HTTP POST Request Handler component to minimize the risk of exploitation.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2024-0419

Affected Products

Jasper Httpdx

References · 8

• 🔥 https://cxsecurity.com/issue/WLB-2024010027 · Exploit
• 🔥 https://youtube.com/watch?v=6dAWGH0-6TY · Exploit
• https://osv.dev/vulnerability/CVE-2024-0419 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0419 · Security Note
• https://vuldb.com/?id.250439 · Note
• https://vuldb.com/?ctiid.250439 · Note
• https://twitter.com/CVEnew/status/1745515598053040363 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1745561311390425160 · Twitter Post