CVE-2023-3171

Name of the Vulnerable Software and Affected Versions EAP-7 versions (affected versions not specified)

Description A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result in a Denial of Service. The vulnerability is related to the deserialization of untrusted data, which can be exploited by a remote attacker to cause a denial of service by sending specially crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.