Description (CNA)
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SmileCDR / HAPI FHIR | affected 0 before * |
CWE
CWE-409