CVE-2022-24685

—

CVSS 3.1

7.5 high

EPSS

2%p74

Published

Feb 28, 2022 (Feb 28, 2022)

Modified

Jun 17, 2026

Description

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.

Vendors: hashicorp
Products: nomad
Weakness: CWE-770
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.