CyberRota Analysis
AI-GeneratedScriban versions 3.0.0 through 7.2.0 are vulnerable to a denial of service attack due to improper handling of the array multiplication operator, which allows attackers to exploit large integer multipliers to trigger excessive memory allocations. This can lead to resource exhaustion and significant degradation of service availability. Organizations using affected versions should prioritize patching to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory allocations, causing resource exhaustion and availability degradation.