CVE-2024-36737 - Improper input validation in OneFlow-Inc

Back Back to CVE browser

HIGH

Improper input validation in OneFlow-Inc

Published Jun 6, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.52%

Description

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.

Affected products

Vendor Oneflow Product Oneflow Default
n/a
- Version
  0.9.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oneflow

n/a

Version	Status	Constraints
0.9.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-229

References (1)

https://gist.github.com/Redmept1on/3a77cc722f82b57f99ccbe835aacf27d
Broken Link

Link	Providers	Tags
https://gist.github.com/Redmept1on/3a77cc722f82b57f99ccbe835aacf27d		Broken Link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 6, 2024

Updated Feb 13, 2025

Reserved May 30, 2024

Link CVE-2024-36737

CISA Vulnrichment

Updated Aug 20, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-36737

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-36737