PT-2021-18741

CVE-2021-30468

·

Published

2021-06-16

·

Updated

2022-04-25

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 3.4.4 Apache CXF versions prior to 3.3.11
Description A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely.
Recommendations For Apache CXF versions prior to 3.4.4, update to version 3.4.4 or later. For Apache CXF versions prior to 3.3.11, update to version 3.3.11 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')
CWE-400: Uncontrolled Resource Consumption
Related identifiers
CVE-2021-30468
GHSA-G23V-P5JQ-JVH4
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com