CyberRota Analysis
AI-GeneratedCTI-Transmute is vulnerable due to an uncontrolled resource consumption issue in the unauthenticated /activity_timeline endpoint, where an attacker can manipulate the days query parameter to request excessively large data ranges. This could lead to significant resource exhaustion, impacting database performance and potentially causing server errors or degraded availability. Organizations using CTI-Transmute should prioritize addressing this vulnerability to prevent potential denial-of-service scenarios.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively large value for this parameter, causing the application to retrieve and process activity data over an arbitrarily large period. This could consume excessive database, CPU, or memory resources, delay the processing of concurrent requests, or trigger an internal server error. Repeated requests could further degrade the availability of the CTI-Transmute website. The vulnerability is corrected by clamping the requested timeline range to a minimum of one day and a maximum of 1,095 days.