CVE-2022-31019

🗓️ 06 Jun 2022 21:05:20Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 68 Views🌐 WEB

Vulnerability in Vapor server-side Swift HTTP web framework allows attackers to crash the server through crafted request

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2022-31019	9 Jun 202216:33	–	circl
CNNVD	Vapor 安全漏洞	9 Jun 202200:00	–	cnnvd
CNVD	Vapor Denial of Service Vulnerability	13 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-31019 DoS Vulnerability in URLEncodedFormDecoder in Vapor	6 Jun 202221:05	–	cvelist
EUVD	EUVD-2023-1872	3 Oct 202520:07	–	euvd
Github Security Blog	Vapor vulnerable to denial of service in URLEncodedFormDecoder	7 Jun 202316:11	–	github
GitLab Advisory Database	Vapor vulnerable to denial of service in URLEncodedFormDecoder	7 Jun 202300:00	–	gitlab
NVD	CVE-2022-31019	9 Jun 202213:15	–	nvd
OSV	CVE-2022-31019 DoS Vulnerability in URLEncodedFormDecoder in Vapor	6 Jun 202221:05	–	osv
OSV	GHSA-QVXG-WJXC-R4GG Vapor vulnerable to denial of service in URLEncodedFormDecoder	7 Jun 202316:11	–	osv

NVD

Vulners

Node

vapor vaporRange<4.61.1

[
  {
    "product": "vapor",
    "vendor": "vapor",
    "versions": [
      {
        "status": "affected",
        "version": "< 4.61.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/vapor/vapor/security/advisories/GHSA-qvxg-wjxc-r4gg
github	www.github.com/vapor/vapor/commit/6c63226a4ab82ce53730eb1afb9ca63866fcf033

Parameter	Position	Path	Description	CWE
array[_0][0][array][_0][0][array]$(for f in $(seq 1100); do echo -n '[_0][0][array]'; done)[string][_0]	request body	foo	Unbounded stack growth in Vapor content decoding leading to crash via crafted HTTP body. Affected in versions prior to 4.61.1.	CWE-674, CWE-120

21 Nov 2024 07:03Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.00419