Lucene search
+L

4 matches found

Mend
Mend
•added 2023/07/19 8:57 p.m.•4 views

CVE-2023-3782

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response...

8.2CVSS0.00721EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/07/19 12:00 a.m.•29 views

Square OkHttp 安全漏洞

Square OkHttp is the United States Square's set of HTTP and HTTP /2 client software for Android and Java applications . The software supports synchronous blocking calls and asynchronous calls with callbacks, response caching to avoid duplicate requests over the network, and more. OkHttp suffers...

5.9CVSS7.1AI score0.00721EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/07/19 12:00 a.m.•16 views

PT-2023-26127 · Okhttp · Okhttp

Name of the Vulnerable Software and Affected Versions: OkHttp affected versions not specified Description: The issue allows for a Denial of Service DoS of the OkHttp client when using a BrotliInterceptor and accessing a malicious web server, or when an attacker can perform a Man-in-the-Middle Mit...

5.9CVSS6.4AI score0.00721EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/19 12:00 a.m.•4 views

CVE-2023-3782: Uncontrolled Resource Consumption

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response...

5.9CVSS6.2AI score0.00721EPSS
SaveExploits1References2
Rows per page
Query Builder