← 返回地图破甲

High resource consumption by insufficient sanitization of forum threads pagination

拒绝服务 / Allocation of Resources Without Limits or Throttling / #1916400

厂商: Flickr
严重程度: 低危 · CVSS 5.3
赏金: $479
弱点: Allocation of Resources Without Limits or Throttling
研究员: @maskopatol
披露日期: 2025-11-24
资产: *.flickr.com
CVE: —

该报告还没有中文解读。

时间线

2023-03-24报告提交
2025-11-24公开披露

阅读 HackerOne 原文 ↗作者 @maskopatol · 版权归作者与 Flickr 所有

同类报告

CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize()Internet Bug Bounty · 2024-11-30 · $2,162 Memory Leak in libcurl via Location Header Handling (CWE-770)curl · 2025-05-22 Security check upcurl · 2025-07-24 HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiBcurl · 2026-05-19 Unbounded memory growth with session handling in TLSv1.3Internet Bug Bounty · 2024-09-22 · $497 CVE-2024-56374 Potential denial-of-service in IPv6 validationInternet Bug Bounty · 2025-02-06