CVE-2022-22728CWE-120
libapreq2 multipart form parse memory corruption
published August 25, 2022
What it is
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.05922 · 93.2th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2022-08-25T00:00Z
EPSS history
Timeline