CVE-2025-0182
CVSS 3.0 Score 7.5 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 400
Summary
CVE-2025-0182 is a denial-of-service vulnerability affecting the danswer-ai/danswer software version 0.9.0. The root cause is a vulnerable version (<=0.49) of the starlette package, which is utilized by fastapi. This issue was addressed in fastapi version 0.115.3. An attacker can exploit this vulnerability by sending an excessive number of requests to the /auth/saml/callback endpoint, causing uncontrolled memory consumption and ultimately leading to a denial-of-service condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.