CVE-2024-36730 - Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Servi

CVE-2024-36730

Summary

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zeros/ones parameter.

References

https://gist.github.com/Redmept1on/1c530e191fb3c76f034c2ea1d11eb821

Vulnerable Configurations

cpe:2.3:a:oneflow:oneflow:0.9.1:*:*:*:*:*:*:*
cpe:2.3:a:oneflow:oneflow:0.9.1:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-755

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

15-10-2024 - 19:25

Published

06-06-2024 - 19:15

Last modified

15-10-2024 - 19:25