Allocation of resources without limits or throttling in Progress Software MOVEit Automation allows attackers to trigger excessive allocation that may consume significant system resources and cause denial of service. The vulnerability is categorized as CWE-770, indicating uncontrolled resource consumption. The description explicitly states that the issue permits excessive allocation but does not detail the exact consequences beyond potential service degradation.

Progress Software MOVEit Automation is affected. The vulnerability exists in all releases before 2025.0.11 and in releases from 2025.1.0 up to but not including 2025.1.7. Versions 2025.0.10 and earlier, as well as 2025.1.0 through 2025.1.6, are vulnerable, while 2025.0.11 and 2025.1.7 and later are fixed.

The CVSS score of 4.3 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in CISA's KEV catalog, suggesting a lower likelihood of widespread exploitation. The attack vector is not explicitly stated in the data; given the nature of the flaw, it is inferred that remote or local authenticated users could invoke the vulnerable functionality to consume resources. The lack of explicit exploitation evidence implies that denial of service would require sufficient impact on system resources rather than direct compromise.