CVE-2022-35142

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-08-04

Last modified

2024-08-03

Weaknesses

CWE-287

Affected products

• Raneto (Raneto Project)

References

• http://raneto.com/
• https://cwe.mitre.org/data/definitions/703.html
• https://gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/
• https://github.com/gilbitron/Raneto/releases