CyberRota Analysis
AI-GeneratedA vulnerability in FreeIPA allows remote, unauthenticated attackers to exploit oversized form POST requests directed at the `/ipa/migration/migration.py` endpoint. This can result in excessive memory consumption, degraded performance, and potential denial of service. Organizations using FreeIPA should prioritize addressing this issue to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)