CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It may lead to a denial-of-service condition.
CVE
CVE-2022-44641
Severity
MEDIUM
CVSS
6.5
EPSS
0.97%
Original NVD Description
In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the server and a Denial of Service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)