CVE-2022-1289

tildearrow Furnace Incomplete Fix CVE-2022-1211 denial of service

Published Apr 10, 2022 CVSS 3.1 · 4.3 Medium EPSS 1.2% KEV · Not listed
Description
A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-24619 A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Apr 15, 2025, 2:41 PM
Reserved
Apr 10, 2022, 12:00 AM
Status
Modified
Published
Apr 10, 2022, 4:15 PM
Modified
Jun 17, 2026, 4:22 AM