CVE-2021-30468CWE-400

Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

published June 16, 2021

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior to 3.3.11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07024 · 94.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-06-16T12:00Z
EPSS history
Timeline
  • 16 JUN 12:00Z
    Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter
    cvelistv5