CVE-2008-2391: Codeplex Subsonic

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page number) of -1.

Affected products

• Codeplex Subsonic: any version

Published 2008-05-21. Last modified 2026-06-16.