CVE-2024-58306 | THREATINT

Description

minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.

PUBLISHED Reserved 2025-12-11 | Published 2025-12-11 | Updated 2025-12-18 | Assigner VulnCheck

HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-400 Uncontrolled Resource Consumption

Product status

Default status

unaffected

2.0.0

affected

Credits

Fernando Mengali finder

References

www.exploit-db.com/exploits/51917 (ExploitDB-51917) exploit

minalic.sourceforge.net/ (Reference) technical-description

www.vulncheck.com/...ice-vulnerability-via-large-get-request (VulnCheck Advisory: minaliC 2.0.0 Denial of Service Vulnerability via Large GET Request) third-party-advisory

cve.org (CVE-2024-58306)

nvd.nist.gov (CVE-2024-58306)

Download JSON