Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WeGIA allows Uncontrolled Resource Consumption via the errorstr parameter
Vulnerability Description
WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the errorstr parameter. Tests confirmed that the server processes URLs up to 8,142 characters, resulting in high resource consumption, elevated latency, timeouts, and read errors. This makes the server susceptible to Denial of Service (DoS) attacks. This vulnerability is fixed in 3.3.0.
CVSS Information
N/A
Vulnerability Type
不加限制或调节的资源分配
Vulnerability Title
WeGIA 安全漏洞
Vulnerability Description
WeGIA是Nilson Lazarin个人开发者的一个福利机构的网络管理器。 WeGIA 3.3.0之前版本存在安全漏洞，该漏洞源于errorstr参数长度未验证，可能导致拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A