CVE-2024-36730 - Improper input validation in OneFlow-Inc

Back Back to CVE browser

HIGH

Improper input validation in OneFlow-Inc

Published Jun 6, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.52%

Description

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zeros/ones parameter.

Affected products

Vendor Oneflow Product Oneflow Default
n/a
- Version
  0.9.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oneflow

n/a

Version	Status	Constraints
0.9.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-755

References (1)

https://gist.github.com/Redmept1on/1c530e191fb3c76f034c2ea1d11eb821
Third Party Advisory

Link	Providers	Tags
https://gist.github.com/Redmept1on/1c530e191fb3c76f034c2ea1d11eb821		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 6, 2024

Updated Mar 14, 2025

Reserved May 30, 2024

Link CVE-2024-36730

CISA Vulnrichment

Updated Oct 30, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-36730

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-36730