CVE-2018-18853

Опубликовано: 31 окт. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.

Ссылки

https://github.com/spray/spray-json/issues/278
Exploit
Third Party Advisory
https://github.com/spray/spray-json/issues/278
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lightbend:spray-json:*:*:*:*:*:*:*:*

Версия до 1.3.4 (включая)

EPSS

Процентиль: 74%

0.00838

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

GHSA-f94m-mqhr-mc29