| Package | Affected versions | Patched versions |
|---|---|---|
| fleet server | ≥ 8.0.0, < 8.19.11≥ 9.0.0, < 9.2.5 | 8.19.119.2.5 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server unavailable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free