[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjk2sBWeVpXHp-DlJsTlRu8DJZyBDbSQeMg7QQnpz_VY":3,"g5a-risk:CVE-2025-59345":109},{"success":4,"data":5,"meta":106},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":51,"weaknesses":52,"weaknessesCount":41,"isActivelyExploited":61,"cisaInfo":27,"otxData":27,"relatedBlogPosts":62,"seoMetadata":63,"configurations":88,"relatedVendorCves":97,"notableEvents":98},"CVE-2025-59345","What is CVE-2025-59345?","Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The \u002Fapi\u002Fv1\u002Fjobs and \u002Fpreheats endpoints in Manager web UI are accessible without authentication. Any user with network access to the Manager can create, delete, and modify jobs, and create preheat jobs. An unauthenticated adversary with network access to a Manager web UI uses \u002Fapi\u002Fv1\u002Fjobs endpoint to create hundreds of useless jobs. The Manager is in a denial-of-service state, and stops accepting requests from valid administrators. This vulnerability is fixed in 2.1.0.","Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The \u002Fapi\u002Fv1\u002Fjobs and \u002Fpreheats endpoints in Manager we...","2025-09-17T19:15:47.277","2025-10-13T16:15:33.74",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,[],[],0.00384,[32,32,32,32,32,32,32],"Critical",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"linuxfoundation","dragonfly","*","cpe:2.3:a:linuxfoundation:dragonfly:*:*:*:*:*:go:*:*",1,[43,48],{"url":44,"source":45,"tags":46},"https:\u002F\u002Fgithub.com\u002Fdragonflyoss\u002Fdragonfly\u002Fblob\u002Fmain\u002Fdocs\u002Fsecurity\u002Fdragonfly-comprehensive-report-2023.pdf","GitHub",[47],"Vendor Advisory",{"url":49,"source":45,"tags":50},"https:\u002F\u002Fgithub.com\u002Fdragonflyoss\u002Fdragonfly\u002Fsecurity\u002Fadvisories\u002FGHSA-89vc-vf32-ch59",[47],2,[53],{"id":54,"name":55,"description":56,"extendedDescription":57,"status":58,"abstraction":59,"structure":60},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":64,"metaDescription":65,"keywords":66,"canonicalUrl":67,"structuredData":68},"What is CVE-2025-59345? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-59345, a critical severity cyber security vulnerability from 2025. Dragonfly is an open source P2P-based file distribution...","CVE-2025-59345, CVE-2025-59345 vulnerability, CVE-2025-59345 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, linuxfoundation security, dragonfly vulnerability","\u002Fwhat-is\u002Fcve-2025-59345",{"@context":69,"@type":70,"headline":64,"description":65,"datePublished":10,"dateModified":11,"author":71,"publisher":75,"about":79,"mainEntityOfPage":83,"articleSection":86,"keywords":87},"https:\u002F\u002Fschema.org","TechArticle",{"@type":72,"name":73,"url":74},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":72,"name":73,"url":74,"logo":76},{"@type":77,"url":78},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":80,"name":6,"description":81,"additionalType":82},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":84,"@id":85},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-59345","Cybersecurity","CVE-2025-59345, CVE-2025-59345 vulnerability, CVE-2025-59345 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[89],{"Operator":27,"Negate":27,"Nodes":90},[91],{"Operator":92,"Negate":61,"CPEMatch":93},"OR",[94],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":95,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":96,"VersionEndIncluding":27},"B6A229E8-1944-4315-A3B8-D39C06488240","2.1.10",[],[99],{"id":100,"eventType":101,"eventTime":102,"details":103,"label":104,"color":105},"d8914399-3886-4047-ab78-253471d04596","NEW_NVD","2025-09-18T04:01:04.270219+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":107,"version":108},1792436126260,"2.0",{"score":110,"band":111,"action":112,"scoredAt":113},55,"Medium","Plan remediation","2026-10-16T07:08:56.737031+00:00"]