Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/saykino/cve-2025-66838
Vulnerability AnalysisWeb SecurityMisconfigurationAPI Security
GitHubsaykino/cve-2025-66838

CVE-2025-66838

Documentation of CVE-2025-66838: a rate-limiting vulnerability in ARIS file upload API allowing authenticated remote attackers to cause denial of service via rapid file uploads.

View Repository
48 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-66838 Lack of Rate Limiting - File Upload

Description

An attacker can rapidly upload a large volume of files to cause denial of service

CVSS Score: 6.5 (Medium)

Attack Type

  • Remote (Authenticated)

Affected Versions

  • Versions before <= 10.0.23.0.3587512

Vendor of Product

  • software ag

Affected Product Code Base

  • ARIS

Affected Component

  • File Upload API.

Mitigations

  • Implement Rate Limit to the upload API.

Vulnerability Details

  • The file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate. An attacker can exploit this behavior to rapidly upload a large volume of files, potentially leading to resource exhaustion such as disk space depletion, increased server load, or degraded performance.

Fixed versions

  • Versions after > 10.0.23.0.3587512

Discovered By:

  • Yazan Abu-Nadi
Download Tool