Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-66838 | Kitploit
Tools/GitHubGitHub/saykino/cve-2025-66838
Vulnerability AnalysisWeb SecurityMisconfigurationAPI Security
GitHubsaykino/cve-2025-66838

CVE-2025-66838

View Repository
7 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-66838 Lack of Rate Limiting - File Upload

Description

An attacker can rapidly upload a large volume of files to cause denial of service

CVSS Score: 6.5 (Medium)

Attack Type

  • Remote (Authenticated)

Affected Versions

  • Versions before <= 10.0.23.0.3587512

Vendor of Product

  • software ag

Affected Product Code Base

  • ARIS

Affected Component

  • File Upload API.

Mitigations

  • Implement Rate Limit to the upload API.

Vulnerability Details

  • The file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate. An attacker can exploit this behavior to rapidly upload a large volume of files, potentially leading to resource exhaustion such as disk space depletion, increased server load, or degraded performance.

Fixed versions

  • Versions after > 10.0.23.0.3587512

Discovered By:

  • Yazan Abu-Nadi
Download Tool