CVE-2024-35185
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Summary
CVE-2024-35185 is a denial-of-service vulnerability affecting the Minder REST ingester, a component of the Minder software supply chain security platform. Prior to version 0.0.49, the REST ingester was vulnerable to crashing the Minder server by sending it a sufficiently large response from an attacker-controlled REST endpoint. The vulnerability arises due to the way Minder handles data fetched from these endpoints, which can result in memory drain and server crash. An attacker can exploit this by configuring a remote REST endpoint to return a large response and instructing Minder to send a request to that endpoint. This issue has been addressed in version 0.0.49.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions