vendor:
XenForo
by:
LockedByte
7.5
CVSS
HIGH
Denial of Service (DoS)
400
CWE
Product Name: XenForo
Affected Version From: XenForo 2
Affected Version To: XenForo 2
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Linux
2018
XenForo CSS Loader DoS
XenForo CSS Loader DoS is a Denial of Service (DoS) vulnerability in XenForo 2 which allows an attacker to send a large number of requests to the target server, resulting in a denial of service. The vulnerability is caused by the lack of input validation in the css.php file, which allows an attacker to send a large number of requests to the target server, resulting in a denial of service. The attacker can use a tool such as the 'requests' library to send a large number of requests to the target server, resulting in a denial of service.
Mitigation:
Input validation should be implemented in the css.php file to prevent attackers from sending a large number of requests to the target server.