CVE-2022-1289

MEDIUM

tildearrow Furnace - Denial of Service via Incomplete CVE-2022-1211 Fix

Title source: llm
STIX 2.1

Description

A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.

References (3)

Core 3
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/tildearrow/furnace/issues/325#issuecomment-1094139655
Third Party Advisory x_refsource_misc
https://vuldb.com/?id.196755

Scores

CVSS v3 4.3
EPSS 0.0110
EPSS Percentile 61.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (48)
tildearrow/furnace
tildearrow/furnace 0.2
tildearrow/furnace 0.2.1
tildearrow/furnace 0.2.2
tildearrow/furnace 0.3
tildearrow/furnace 0.3.1
tildearrow/furnace 0.4
tildearrow/furnace 0.4.1
tildearrow/furnace 0.4.2
tildearrow/furnace 0.4.3
... and 38 more
Published Apr 10, 2022
Tracked Since Feb 18, 2026