CVE-2024-35185

Summary

CVE-2024-35185 is a denial-of-service vulnerability affecting the Minder REST ingester, a component of the Minder software supply chain security platform. Prior to version 0.0.49, the REST ingester was vulnerable to crashing the Minder server by sending it a sufficiently large response from an attacker-controlled REST endpoint. The vulnerability arises due to the way Minder handles data fetched from these endpoints, which can result in memory drain and server crash. An attacker can exploit this by configuring a remote REST endpoint to return a large response and instructing Minder to send a request to that endpoint. This issue has been addressed in version 0.0.49.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.