Kurz gesagt
- CVE-2024-6227 ist eine Schwachstelle (HOCH (CVSS 7.5)) in aim, aim (aimstack).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.58%, höher als bei 47.6% aller Schwachstellen.
- Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.
| Package | Affected versions | Patched versions |
|---|
| aim PyPI | ≤ 3.19.3
| No fix yet |
| aim | = 3.19.3
| No fix yet |
Description
A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.
NVD description
A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free