The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.
References
Configurations
History
13 Feb 2023, 00:48
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2017-06-16 22:29
Updated : 2023-12-10 12:15
NVD link : CVE-2015-3254
Mitre link : CVE-2015-3254
CVE.ORG link : CVE-2015-3254
JSON object : View
Products Affected
apache
- thrift
CWE
CWE-20
Improper Input Validation