Description
Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions prior to both 4.10.16 and 3.10.5 do not correctly handle descending array index order during form-urlencoded body binding in theJsonBeanPropertyBinder::expandArrayToThreshold, which allows remote attackers to cause a DoS (non-terminating loop, CPU exhaustion, and OutOfMemoryError) via crafted indexed form parameters (e.g., authors[1].name followed by authors[0].name). This issue has been fixed in versions 4.10.16 and 3.10.5.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
micronaut-projects micronaut-core
>= 4.0.0-M1, < 4.10.16affected< 3.10.5affected
References
- https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-43w5-mmxv-cpvh ↗
- https://github.com/micronaut-projects/micronaut-core/pull/12410 ↗
- https://github.com/micronaut-projects/micronaut-core/commit/1afe509677c51b320041b7a2c177366d4a4deb55 ↗
- https://github.com/micronaut-projects/micronaut-core/releases/tag/v3.10.5 ↗
- https://github.com/micronaut-projects/micronaut-core/releases/tag/v4.10.16 ↗