CVE-2022-2134 - Allocation of Resources Without Limits or Throttling in inventree/inventree

Back Back to CVE browser

MEDIUM

Allocation of Resources Without Limits or Throttling in inventree/inventree

Published Jun 20, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.86%

Description

Allocation of Resources Without Limits or Throttling in GitHub repository inventree/inventree prior to 0.8.0.

Affected products

Vendor Inventree Product Inventree/inventree Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <0.8.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Inventree

Inventree/inventree

n/a

Version	Status	Constraints
unspecified	affected	<0.8.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (2)

https://github.com/inventree/inventree/commit/63b4ff3eb6e80861962fafe79c9b483cd7239d6c
PatchThird Party Advisory
https://huntr.dev/bounties/57b0f272-a97f-4cb3-b546-c863c68a561a
ExploitPatchThird Party Advisory

Link	Providers	Tags
https://github.com/inventree/inventree/commit/63b4ff3eb6e80861962fafe79c9b483cd7239d6c		PatchThird Party Advisory
https://huntr.dev/bounties/57b0f272-a97f-4cb3-b546-c863c68a561a		ExploitPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published Jun 20, 2022

Updated Aug 3, 2024

Reserved Jun 20, 2022

Link CVE-2022-2134

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-2134

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-2134