Improper input validation in Winny

CVE-2010-2362

Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.

Affected products

  • Winny
  • N/a — versions n/a

Weakness classification (CWE)

References