CVE-2025-0190: aimstack aim

csirt@kutim:~/threat-intel/cve/CVE-2025-0190

CVSS 7.5 · High EPSS 0,64%

Kerentanan Excessive Data Query Operations in a Large Data Table pada aimstack aim. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

Rincian

Terbit di NVD: 20 Maret 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-1049: Excessive Data Query Operations in a Large Data Table
EPSS (30 hari): 0,64% peluang dieksploitasi; lebih tinggi dari 49,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
aimstack	aim	Versi 3.25.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://huntr.com/bounties/38d151f1-abb4-443a-86b0-6c26f0c6cb70 exploit · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.