CVE-2024-58306

HighCVSS 8.7

Published: 11/12/2025(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

42th percentile - higher than 42% of all known CVEs

Summary

minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.

Risk Assessment

An attacker could cause service unavailability, leading to operational disruptions and potential reputational damage.

Recommendation

Update minaliC to a patched version and implement HTTP request size limits.

Other vulnerabilities in minaliC

CVE-2012-0273High
Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code. The attack can be performed by manipulating the session_id cookie, directory name, or file name in the respective functions.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS