Read the docs
TI-2018-15314 Aliases CVE-2018-25087GHSA-r6fh-29xj-rcjp

Arborator Server project.cgi start denial of service

Priority LOW 35CWE-404Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-404.

Summary

A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start of the file project.cgi. The manipulation of the argument project leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as cdbdbcbd491db65e9d697ab4365605fdfab1a604. It is recommended to apply a patch to fix this issue. VDB-230662 is the identifier assigned to this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00901 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ArboratorServerall versions—No fix listedCNA
  • Server VendorArborator Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:arborator_server_project:arborator_server:*:*:*:*:*:*:*:*before 2018-10-20VulnerableArborator Server Project
  • cpe:2.3:a:arborator_server_project:arborator_server:*:*:*:*:*:*:*:* Versions before 2018-10-20 Vulnerable ·Arborator Server Project

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-25087
  2. 2026-10-03 Alias added: GHSA-r6fh-29xj-rcjp

References

Patch 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences