Lucene search
K

4 matches found

OSV
OSV
added 2023/06/07 4:11 p.m.20 views

GHSA-QVXG-WJXC-R4GG Vapor vulnerable to denial of service in URLEncodedFormDecoder

Vapor is an HTTP web framework for Swift. Vapor versions earlier than 4.61.1 are vulnerable to a denial of service in the URLEncodedFormDecoder. Impact When using automatic content decoding, e.g. swift app.post"foo" request - String in let foo = try request.content.decodeFoo.self return "\foo" An...

7.5CVSS7.2AI score0.00419EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/06/07 4:11 p.m.21 views

Vapor vulnerable to denial of service in URLEncodedFormDecoder

Vapor is an HTTP web framework for Swift. Vapor versions earlier than 4.61.1 are vulnerable to a denial of service in the URLEncodedFormDecoder. Impact When using automatic content decoding, e.g. swift app.post"foo" request - String in let foo = try request.content.decodeFoo.self return "\foo" An...

7.5CVSS6.6AI score0.00419EPSS
Exploits1References4Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2023/06/07 12:0 a.m.17 views

Vapor vulnerable to denial of service in URLEncodedFormDecoder

Vapor is an HTTP web framework for Swift. Vapor versions earlier than 4.61.1 are vulnerable to a denial of service in the URLEncodedFormDecoder...

7.5CVSS6.6AI score0.00419EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2022/06/06 9:5 p.m.11 views

CVE-2022-31019 DoS Vulnerability in URLEncodedFormDecoder in Vapor

Vapor is a server-side Swift HTTP web framework. When using automatic content decoding an attacker can craft a request body that can make the server crash with the following request: curl -d "array00array00array$for f in $seq 1100; do echo -n '00array'; donestring0=hello%20world"...

7.5CVSS7.7AI score0.00419EPSS
Exploits1References2
Rows per page
Query Builder