Homepage

Allocation of Resources Without Limits or Throttling The advisory has been revoked - it doesn't affect any version of package puppetserver.src-satellite:el8  (opens in a new tab)

Threat Intelligence

EPSS
32.88% (99th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-PUPPETSERVERSRCSATELLITE-13045796
  • published25 Sept 2025
  • disclosed16 Jun 2025
Report a new vulnerability Found a mistake?

Introduced: 16 Jun 2025

CVE-2025-48976  (opens in a new tab)
CWE-770  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream puppetserver.src-satellite:el8 package and not the puppetserver.src-satellite:el8 package as distributed by RHEL.

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.

This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4.

Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.