CVE-2024-58306

minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.

CVSS v4.0

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

0.49% chance of exploitation in the next 30 days, 40th percentile

Published

2025-12-11

Updated

2026-04-07

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/51917

References

• CVE Record
• NVD entry

Related

• CVE-2024-58305
• CVE-2024-58307
• CVE-2024-58304
• CVE-2024-58308
• CVE-2024-58303
• CVE-2024-58309