CVE-2026-54224
2026-06-18
14h17 +00:00
14h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent requests to view any user profile on instances with many registered users, an authenticated attacker can easily exhaust database resources and completely deny access to the application for other users.
Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Asymmetric Resource Consumption (Amplification) The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is "asymmetric." |
