Design/Logic Flaw

2023-07-1921:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

dos

okhttp

brotliinterceptor

mitm

http response

vulnerability

nvd

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

27.6%

JSON

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

References

github.com/square/okhttp/issues/7738

research.jfrog.com/vulnerabilities/okhttp-client-brotli-dos/