Description

Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce (such as 42069), and then passes the challenge with difficulty zero. Commit e09d0226a628f04b1d80fd83bee777894a45cd02 fixes this behavior by not using a client-specified difficulty value.

INFO

Published Date :

2025-01-27T22:57:26.728Z

Last Modified :

2025-01-28T15:18:44.746Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-24369 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-24369.

URL Resource
https://github.com/Xe/x/commit/7bd7b209f4f1b897de85ec8973458dc8be606a8b cve-icon cve-icon
https://github.com/Xe/x/commit/e09d0226a628f04b1d80fd83bee777894a45cd02 cve-icon cve-icon
https://github.com/Xe/x/security/advisories/GHSA-56w8-8ppj-2p4f cve-icon cve-icon
https://xeiaso.net/notes/2025/GHSA-56w8-8ppj-2p4f cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability