CVE-2024-58306

minaliC 2.0.0 Denial of Service Vulnerability via Large GET Request

CVSS 8.7 HIGHEPSS 0.4%CWE-400

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 dez 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Produtos afetados

minalic · minaliC

Referências

http://minalic.sourceforge.net/https://www.exploit-db.com/exploits/51917 https://www.vulncheck.com/advisories/minalic-denial-of-service-vulnerability-via-large-get-request