HIGHMaven →
Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS
Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS
Affected packages
- io.micronaut:micronaut-http-client— before 3.10.7
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-387m-935m-c4vw
- https://github.com/micronaut-projects/micronaut-core/commit/6e88a972718d6e1521c5b3bb7766451798dba4e3
- https://github.com/micronaut-projects/micronaut-core/commit/c06a2715ca7f78321bc3ca05f41cca78cd351320
- https://github.com/micronaut-projects/micronaut-core/commit/f1dffffec8fb5e3b7e94ae907ce0be3831e499d4
- https://github.com/micronaut-projects/micronaut-core
Structured record: https://osv.dev/vulnerability/GHSA-387m-935m-c4vw
Recommended response stack
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta