A critical resource exhaustion vulnerability in Open Source Social Network (OSSN) allows unauthenticated attackers to cause service disruption through memory and CPU depletion.

The application fails to properly validate image dimensions during processing, allowing an unauthenticated attacker to upload a specially crafted image that forces the server to allocate excessive memory and CPU resources.

Successful exploitation of this vulnerability results in a Denial of Service (DoS) condition, which renders the social networking platform unavailable to legitimate users. Given the CVSS score of 8.2, this flaw poses a high risk to business continuity and operational uptime, as the attack vector is network-based and requires no authentication.

Immediate Action: Upgrade to Open Source Social Network (OSSN) version 9.0 or later, which implements strict image dimension validation and improved resource management.

Proactive Monitoring: Monitor server resource utilization, specifically memory and CPU spikes, and review web access logs for frequent or suspicious image upload requests originating from the same source.

Compensating Controls: If an immediate upgrade is not feasible, restrict the memory_limit and max_execution_time in php.ini and implement server-side validation to reject images exceeding reasonable pixel dimensions.

Public Exploit Available: No

This vulnerability represents a significant threat to platform stability due to the ease with which an unauthenticated attacker can trigger a denial of service. Administrators must prioritize updating to version 9.0 to ensure robust protection against resource exhaustion attacks. Until the patch is applied, implementing the suggested configuration changes is essential to maintain service availability.