CVE-2024-29025

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The "HttpPostRequestDecoder" can be tricked to accumulate data. While the decoder can store items on the disk if configured so, there are no limit...

CVE-2024-29025: Allocation of Resources Without Limits or Throttling

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The HttpPostRequestDecoder can be tricked to accumulate data. While the decoder can store items on the disk if configured so, there are no limits ...