PT-2021-18741
CVE-2021-30468
·
تاريخ النشر
2021-06-16
·
تاريخ التحديث
2022-04-25
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Apache CXF versions prior to 3.4.4
Apache CXF versions prior to 3.3.11
Description
A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely.
Recommendations
For Apache CXF versions prior to 3.4.4, update to version 3.4.4 or later.
For Apache CXF versions prior to 3.3.11, update to version 3.3.11 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾