Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/89930?format=api",
    "vulnerability_id": "VCID-zdtg-yqwx-syb5",
    "summary": "An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.\n\nWe have already fixed the vulnerability in the following version:\nQsync Central 5.0.0.0 ( 2025/06/13 ) and later",
    "aliases": [
        {
            "alias": "CVE-2025-30261"
        }
    ],
    "fixed_packages": [],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-30261",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00208",
                    "scoring_system": "epss",
                    "scoring_elements": "0.43298",
                    "published_at": "2026-06-11T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-30261"
        },
        {
            "reference_url": "https://www.qnap.com/en/security-advisory/qsa-25-28",
            "reference_id": "qsa-25-28",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.1",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-29T18:18:27Z/"
                }
            ],
            "url": "https://www.qnap.com/en/security-advisory/qsa-25-28"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 770,
            "name": "Allocation of Resources Without Limits or Throttling",
            "description": "The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor."
        }
    ],
    "exploits": [],
    "severity_range_score": "7.1 - 7.1",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zdtg-yqwx-syb5"
}