CVE-2021-21328

Vapor is a web framework for Swift. In Vapor before version 4.40.1, there is a DoS attack against anyone who Bootstraps a metrics backend for their Vapor app. The following is the attack vector: 1. send unlimited requests against a vapor instance with different paths. this will create unlimited...

CVE-2021-21328

Vapor is a web framework for Swift. In Vapor before version 4.40.1, there is a DoS attack against anyone who Bootstraps a metrics backend for their Vapor app. The following is the attack vector: 1. send unlimited requests against a vapor instance with different paths. this will create unlimited...

CVE-2021-21328

CVE-2021-21328 : Vapor (Swift) before 4.40.1 is vulnerable to a DoS when bootstrapping a metrics backend. An attacker can send unlimited requests to Vapor with different paths, creating unlimited counters and timers and potentially draining the system; downstream services may also be affected by ...