CVE-2023-34429
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Weintek Weincloud version 0.13.6 could allow an attacker to cause a denial-of-service condition by sending a forged JWT token.
Risk Assessment
An attacker could disrupt the availability of the Weincloud service, potentially leading to downtime for systems relying on this platform.
Recommendation
It is recommended to upgrade to the latest version of Weincloud to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Weintek Weincloud v0.13.6
See all- CVE-2023-37362High
Weintek Weincloud version 0.13.6 may allow an attacker to abuse the registration functionality to log in with testing credentials to the official website.
- CVE-2023-35134High
Weintek Weincloud version 0.13.6 could allow an attacker to reset a password using the corresponding account’s JWT token.
Original NVD description (English source)
Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.