Lucene search
Veracode Vulnerability DatabaseVERACODE:31003HistoryJun 18, 2021 - 7:36 a.m.
Denial Of Service
2021-06-1807:36:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
31.9%
opencast-kernel is vulnerable to denial of service. The vulnerability exists due to an insecure processing of a single HTTP request to parse XML through the system, causing it to expand a .crafted string 100,000 times causing the system to hang.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opencast :: authorization-xacml | le | 9.5 |
Related
cve
cve
CVE-2021-32623
2021-06-16 00:15:07
cvelist
cvelist
CVE-2021-32623 Opencast vulnerable to billion laughs attack (XML bomb)
2021-06-15 23:45:10
github
github
Billion laughs attack (XML bomb)
2021-06-17 20:11:35
nvd
nvd
CVE-2021-32623
2021-06-16 00:15:07
prion
prion
Double free
2021-06-16 00:15:00
osv
osv
CVE-2021-32623
2021-06-16 00:15:07
Billion laughs attack (XML bomb)
2021-06-17 20:11:35
openvas
openvas
Opencast < 9.6 DoS Vulnerability
2021-06-17 00:00:00