CVE-2024-30251

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

• ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
• AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

1.09% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 65.3% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2024-05-02 13:55Z2 YR AGO

Last updated

2025-11-03 20:37Z11 MO AGO

Reserved

2024-03-26

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')Base

Data version

5.2

Document digest

b415be89d026c75712d038dab5019c5158622d48660d94beb227e97e550f48d9

• github.comhttps://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84x_refsource_CONFIRM
• github.comhttps://github.com/aio-libs/aiohttp/commit/7eecdff163ccf029fbb1ddc9de4169d4aaeb6597x_refsource_MISC
• github.comhttps://github.com/aio-libs/aiohttp/commit/cebe526b9c34dc3a3da9140409db63014bc4cf19x_refsource_MISC
• github.comhttps://github.com/aio-libs/aiohttp/commit/f21c6f2ca512a026ce7f0f6c6311f62d6a638866x_refsource_MISC
• www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/05/02/4
• lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/02/msg00002.html