{"id":"CVE-2024-58306","state":"PUBLISHED","title":"minaliC 2.0.0 Denial of Service Vulnerability via Large GET Request","description":"minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.","publishedAt":"2025-12-11T21:41:27.571Z","updatedAt":"2026-04-07T14:08:50.074Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["minalic minaliC"],"affected":[{"vendor":"minalic","product":"minaliC","defaultStatus":"unaffected","versions":[{"version":"2.0.0","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/51917","http://minalic.sourceforge.net/","https://www.vulncheck.com/advisories/minalic-denial-of-service-vulnerability-via-large-get-request"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/58xxx/CVE-2024-58306.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-58306","state":"PUBLISHED","datePublished":"2025-12-11T21:41:27.571Z","dateUpdated":"2026-04-07T14:08:50.074Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2025-12-11T11:49:20.718Z"},"containers":{"cna":{"title":"minaliC 2.0.0 Denial of Service Vulnerability via Large GET Request","descriptions":[{"lang":"en","value":"minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption."}],"affected":[{"vendor":"minalic","product":"minaliC","defaultStatus":"unaffected","versions":[{"version":"2.0.0","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/51917","name":"ExploitDB-51917","tags":["exploit"]},{"url":"http://minalic.sourceforge.net/","name":"Reference","tags":["technical-description"]},{"url":"https://www.vulncheck.com/advisories/minalic-denial-of-service-vulnerability-via-large-get-request","name":"VulnCheck Advisory: minaliC 2.0.0 Denial of Service Vulnerability via Large GET Request","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-04-07T14:08:50.074Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_alshoff:minalic:2.0.0:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","type":"finder","value":"Fernando Mengali"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"vulncheck"},"datePublic":"2024-03-22T00:00:00.000Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-18T21:47:04.882721Z","id":"CVE-2024-58306","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-18T21:47:15.003Z"}}]}}}