CVE-2022-1289
tildearrow Furnace Incomplete Fix CVE-2022-1211 denial of service
概要
tildearrow Furnace Incomplete Fix CVE-2022-1211 denial of service
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- web vuldb.com