ByteOS Network

NVD Vulnerability Details :

CVE-2025-0190

Analyzed

Source-security@huntr.dev

Published At-20 Mar, 2025 | 10:15

Updated At-28 Mar, 2025 | 14:28

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

aimstack>>aim>>3.25.0

cpe:2.3:a:aimstack:aim:3.25.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-1049	Primary	security@huntr.dev
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: CWE-1049

Type: Primary

Source: security@huntr.dev

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://huntr.com/bounties/38d151f1-abb4-443a-86b0-6c26f0c6cb70	security@huntr.dev	Exploit Third Party Advisory

Hyperlink: https://huntr.com/bounties/38d151f1-abb4-443a-86b0-6c26f0c6cb70

Source: security@huntr.dev

Resource:

Exploit

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History