Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-3782

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

Description

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

com.squareup.okhttp3:okhttp-brotli

  • 0 to < *affected

References