CyberRota Analysis
AI-GeneratedThe vulnerability affects wger versions prior to 2.5, where insufficient validation of routine date ranges allows authenticated users to create excessively long routines. This can lead to denial-of-service conditions by overwhelming server resources through excessive computation during routine detail requests. Organizations using wger should prioritize addressing this issue to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing authenticated users to create routines spanning arbitrarily long periods. Attackers can trigger the date_sequence computation via routine detail endpoints, forcing the server to iterate thousands of times per request and exhaust worker threads, denying service to legitimate users.