Aimhubio Aim Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Aimhubio Aim version 3.25.0. This issue occurs when a large number of tracked metrics are retrieved simultaneously from the Aim web API, causing the web server to become unresponsive. The vulnerability arises from the absence of a limit on the number of metrics that can be requested per call, coupled with the server's single-threaded architecture. This combination leads to excessive resource consumption, blocking the server and causing a service outage.

Impact

Exploitation of this vulnerability can cause the web server to become unresponsive, leading to a denial-of-service condition where legitimate users are unable to access the service.