VULNERABILITY INTELLIGENCE

CVE-2025-49176

CVSS score7.3 HIGH

EPSS probability0.37%

CISA KEVNot currently listed

Published2025-06-17

Last modified2026-06-30

Description

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.