CVE-2023-3171 — Eap-7: heap exhaustion via deserialization
A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could …
Published: 2023-12-27 · CVSS: 7.5 · CVSS 3.1
A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result in a Denial of Service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7