CVE-2024-12345 INW Krbyyyzo Daily Huddle Site gbo.aspx resource consumption
Attackers can cause resource consumption in the Daily Huddle Site via the s argument, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-12345?
CVE-2024-12345 is a medium-severity denial of service vulnerability in INW Krbyyyzo, published on 27 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The manipulation of the argument s leads to resource consumption. It is possible to launch the attack on the local host. Other endpoints might be affected as well.
Which versions are affected by CVE-2024-12345?
How do I fix CVE-2024-12345?
No fix has been published for CVE-2024-12345 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-12345 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-12345 exists.