CVE-2025-27911

Katalog CVE

CVSS 6.5 · Medium EPSS 0,44%

Kerentanan Allocation of Resources Without Limits or Throttling pada datalust seq. Skor CVSS 3.1 6.5 (Medium) menurut mitre.org.

Deskripsi (NVD)

An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit bytes" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.

Rincian

Terbit di NVD

11 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber mitre.org
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/datalust/seq-tickets/issues/2365 issue tracking · advisory vendor
• https://datalust.co/seq product