CVE-2014-125127

CVE-2014-125127 describes a Denial of Service (DoS) vulnerability in the mikecao/flight PHP framework, affecting versions prior to v1.2. The flaw stems from the framework's eager loading of entire request bodies, even when unnecessary. An unauthenticated attacker can exploit this by sending large payloads, leading to excessive memory consumption and potential server crashes, resulting in a CVSS score of 7.5 (High). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.