Junglewise Threat Intelligence

CVE-2018-18853: Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

CVE-2018-18853 · Severity: low · CVSS 3 · Published 2018-11-09

Technologies: io.spray:spray-json_2.10 (Maven), io.spray:spray-json_2.12 (Maven), io.spray:spray-json_2.11 (Maven). Vendors: Maven.

Executive brief

Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

Affected products

  • Maven io.spray:spray-json_2.10
  • Maven io.spray:spray-json_2.12
  • Maven io.spray:spray-json_2.11

Related threats