Back to search
CVE-2024-9953
Published: Oct 14, 2024
Modified: Mar 20, 2025
PUBLISHED
Description
A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profile, which may lead to a DoS condition when the profile is accessed. While the Django server restricts unpickling to prevent server crashes, this vulnerability could still disrupt operations.
| Vendor | Product | Versions |
|---|---|---|
CERT/CC | VINCE - Vulnerability Information and Coordination Environment | affected * - < 3.0.8 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now