What’s Vulnerable › Vulnerabilities

CVE-2018-25087: Arborator Server project.cgi start denial of service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-06 · updated 2026-06-17
• Weakness: CWE-404

Description

A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start of the file project.cgi. The manipulation of the argument project leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as cdbdbcbd491db65e9d697ab4365605fdfab1a604. It is recommended to apply a patch to fix this issue. VDB-230662 is the identifier assigned to this vulnerability.

Affected products

• Arborator Server: before 2018-10-20 — fixed in 2018-10-20

How to fix

Upgrade to a fixed version: Arborator Server 2018-10-20. Check the vendor advisory for mitigations.

References

• https://github.com/Arborator/arborator-server/commit/cdbdbcbd491db65e9d697ab4365605fdfab1a604
• https://vuldb.com/?ctiid.230662
• https://vuldb.com/?id.230662
• https://github.com/Arborator/arborator-server/commit/cdbdbcbd491db65e9d697ab4365605fdfab1a604
• https://vuldb.com/?ctiid.230662
• https://vuldb.com/?id.230662

Get alerted when CVE-2018-25087 or the next vulnerability affects your stack