PT-2020-7760

CVE-2014-8937

·

Published

2020-06-01

·

Updated

2020-06-02

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Lexiglot versions through 2014-11-20
Description The issue allows for denial of service because the "api/update.php" endpoint launches svn update operations that use a great deal of resources.
Recommendations For versions through 2014-11-20, consider restricting access to the "api/update.php" endpoint to minimize the risk of exploitation. As a temporary workaround, consider disabling the svn update operations launched by the "api/update.php" endpoint until a more permanent solution is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾