Skip to content

Instantly share code, notes, and snippets.

@Redmept1on

Redmept1on/gist:64aa53d37e99975725a7d3e2dc9d9761

Created June 6, 2024 16:14
Show Gist options
  • Save Redmept1on/64aa53d37e99975725a7d3e2dc9d9761 to your computer and use it in GitHub Desktop.
Save Redmept1on/64aa53d37e99975725a7d3e2dc9d9761 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
[CVE ID]
CVE-2024-36743
[Affected Component]
OneFlow v0.9.1
[VERSION]
OneFlow v0.9.1
[VulnerabilityType Other]
CWE-20: Improper Input Validation
[DESCRIPTION]
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment