Описание
A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).
Ссылки
- Mailing List
- Mailing List
Уязвимые конфигурации
Одно из
EPSS
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
Связанные уязвимости
A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).
Apache CXF: Denial of Service vulnerability with temporary files
Уязвимость функции CachedOutputStream каркаса для веб-сервисов Apache CXF, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5.9 Medium
CVSS3
7.5 High
CVSS3