CVE-2022-25897

—

CVSS 3.1

7.5 high

EPSS

1%p68

Published

Sep 8, 2022 (Sep 8, 2022)

Modified

Jun 17, 2026

Description

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

Vendors: eclipse
Products: milo
Weakness: CWE-770
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.