CVE-2024-13925: Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13925?
CVE-2024-13925 has a medium severity level, as it allows for potential denial of service through log flooding.
How do I fix CVE-2024-13925?
To fix CVE-2024-13925, update the Klarna Checkout for WooCommerce plugin to version 2.13.5 or later.
What are the potential impacts of CVE-2024-13925?
CVE-2024-13925 can lead to rapid disk space consumption and potentially bring down the website due to log flooding.
Who is affected by CVE-2024-13925?
CVE-2024-13925 affects users of the Klarna Checkout for WooCommerce WordPress plugin prior to version 2.13.5.
Is CVE-2024-13925 exploitable without authentication?
Yes, CVE-2024-13925 can be exploited by unauthenticated users due to the exposed Ajax endpoint.