emmflo yuko-bot denial of service
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-404.
Summary
A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument title leads to denial of service. The attack can be initiated remotely. The name of the patch is e580584b877934a4298d4dd0c497c79e579380d0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217636.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| emmflo | yuko-bot | all versions | — | No fix listed | CNA |
- yuko-bot Vendoremmflo Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:yuko-bot_project:yuko-bot:*:*:*:*:*:*:*:* | before 11-13-2014 | Vulnerable | Yuko-bot Project |
- cpe:2.3:a:yuko-bot_project:yuko-bot:*:*:*:*:*:*:*:* Versions before 11-13-2014 Vulnerable ·Yuko-bot Project
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2014-125066
- 2026-10-03 Alias added: GHSA-cvvh-7xcr-36pm
Sources
- CVE-2014-125066 · CVE Program
- CVE-2014-125066 · NVD
- FIRST EPSS
- GHSA-cvvh-7xcr-36pm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences