Skip to content
OpenAdvisories
High · 7.5 CVE-2024-25407 EUVD-2024-22738GHSA-hg7g-ghrw-94pc

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow att…

Published Feb 13, 2024 · Updated May 8, 2025 · Assigned by mitre

Description

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service (DoS) by using the predicted transaction ID's to terminate other transactions.

References