Description (CNA)
DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before * |
CWE
CWE-400
References
- https://github.com/square/okhttp/issues/7738
- https://research.jfrog.com/vulnerabilities/okhttp-client-brotli-dos/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.