CVE-2024-3789

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Uncontrolled resource consumption vulnerability in White Bear Solutions WBSAirback, version 21.02.04. This vulnerability could allow an attacker to send multiple command injection payloads to influence the amount of resources consumed.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-378907.5ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount thresho CVE-2024-378916.5urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization`CVE-2024-378935.9Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OAuth flow may allow m CVE-2024-378946.3Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables CVE-2024-378955.7Lobe Chat is an open-source LLMs/AI chat framework. In affected versions if an attacker can successfully authenticate through SSO/Access Cod CVE-2024-378968.8Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerability. The SQL inject CVE-2024-378975.4SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. SFTPGo WebAd CVE-2024-378984.3XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When a user has view but not edit r CVE-2024-378998.0XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin disables a user accou CVE-2024-37904.8Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/SystemUsers, login / description CVE-2024-379004.6XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading an attachment with a CVE-2024-379018.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit right on any pag