title: YARP Denial of Service Vulnerability
description: YARP Denial of Service Vulnerability
problem types: Denial of Service
affected:
{
vendor: Microsoft
product: YARP 1.0
cpes: cpe:2.3:a:microsoft:yet_another_reverse_proxy:1.0.0:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 1.0.0, lessThan: 1.0.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: YARP 1.1RC
cpes: cpe:2.3:a:microsoft:yet_another_reverse_proxy:1.1.0:rc1.22152.1:*:*:*:*:*:*
platforms: Unknown
versions:
version: 1.1.0, lessThan: 1.1.0-rc.1.22211.2, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
]