| Package | Affected versions | Patched versions |
|---|---|---|
| freeipa | < 4.13.3 | 4.13.3 |
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free