Resource exhaustion in Szad670401 Szad670401/hyperlpr
CVE-2024-10713
A vulnerability in szad670401/hyperlpr v3.0 allows for a Denial of Service (DoS) attack. The server fails to handle excessive characters appended to the end of multipart boundaries, regardless of the character used. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, leading to excessive resource consumption and a complete denial of service for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue.
EPSS: 0.005 (39.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Szad670401 Szad670401/hyperlpr — versions unspecified
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-10713?
- CVE-2024-10713 is a high-severity vulnerability in Szad670401 Szad670401/hyperlpr, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2025-03-20.
- How severe is CVE-2024-10713?
- High severity. CVSS v3 base score is 7.5 out of 10.