Skip to content
OpenAdvisories
High · 7.5 CVE-2022-25508 EUVD-2022-0107GHSA-hggv-mcp4-vxc5PYSEC-2022-43054

Improper Authentication in FreeTAKServer

Published Mar 10, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service (DoS) via an unusually large amount of created routes, or create unsafe or false routes for legitimate users.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI freetakserver < 1.9.8.5 1.9.8.5 GHSA-hggv-mcp4-vxc5
PyPI freetakserver all versions — PYSEC-2022-43054

References