Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service
Vulnerability Description
Mesop is a Python-based UI framework that allows users to build web applications. From version 1.2.3 to before version 1.2.5, an uncontrolled resource consumption vulnerability exists in the WebSocket implementation of the Mesop framework. An unauthenticated attacker can send a rapid succession of WebSocket messages, forcing the server to spawn an unbounded number of operating system threads. This leads to thread exhaustion and Out of Memory (OOM) errors, causing a complete Denial of Service (DoS) for any application built on the framework. This issue has been patched in version 1.2.5.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Mesop 安全漏洞
Vulnerability Description
Mesop是Mesop开源的一个快速构建Python Web应用的UI框架。 Mesop 1.2.3至1.2.5之前版本存在安全漏洞，该漏洞源于WebSocket实现存在不受控制的资源消耗问题，可能导致未经身份验证的攻击者通过快速发送消息耗尽线程和内存，造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A