Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/14 12:02 a.m.13 views

GHSA-8GWC-X7MG-7P7P Apache XML Security For Java vulnerable to Infinite Loop

Affected versions of xmlsec are subject to a denial of service vulnerability. Should a user check the signature of a message larger than 512 MB, the method expandSizeint newPos of class org.apache.xml.security.utils.UnsyncByteArrayOutputStream goes in an endless loop. A remote attacker could use...

5CVSS5.9AI score0.04732EPSS
SaveExploits0References11
Rows per page
Query Builder