CVE-2024-10314: Helix Core

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the auto-generation function was identified. Reported by Karol Więsek.

Affected products

  • Helix Helix Core: from 0.0.0, before 2024.2 (fixed in 2024.2); from 0.0.0, before 2024.1 (fixed in 2024.1); from 0.0.0, before 2023.2 (fixed in 2023.2); from 0.0.0, before 2023.1 (fixed in 2023.1); from 0.0.0, before 2022.2 (fixed in 2022.2)
  • Perforce Helix Core: before 2024.2 (fixed in 2024.2)

Published 2024-11-11. Last modified 2026-06-17.