Open Source Social Network (OSSN) is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An at…

Open Source Social Network (OSSN) versions prior to 9.0 are vulnerable to resource exhaustion attacks through specially crafted images with extreme pixel dimensions. Attackers can upload images with large pixel dimensions that consume significant memory and CPU during decompression and resizing, leading to Denial of Service conditions. The vulnerability affects the PHP-based social networking software's image processing functionality. Users should upgrade to OSSN 9.0 which includes stricter validation and improved resource management. Temporary mitigation involves adjusting PHP memory limits and implementing dimension checks before processing.