CVE-2019-25072

CVE-2019-25072 is a denial-of-service vulnerability affecting Tendermint Tendermint, stemming from its support for Gzip compression in request bodies and a lack of response body size limits. A malicious server can exploit this to force a client to consume excessive system resources. This vulnerability carries a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and a high impact on availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.