CVE-2024-56200
CVSS 3.1 Score 8.6 of 10 (high)
Details
Published Dec 19, 2024
CWE ID 400
CWE ID 405
Summary
CVE-2024-56200 affects Altair, a fork of Misskey v12. This vulnerability stems from a lack of request validation and authentication in Altair's image proxy for compressing and resizing remote files. Malicious actors could exploit this weakness to cause denial-of-service attacks, resulting in increased CPU usage on affected servers or excessive network traffic. Users running affected versions are urged to upgrade to v12.24Q4.1 to mitigate this risk, as no known workarounds exist.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.