Read the docs

Lightbend

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

Lightbend records in CISA KEV

No Lightbend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Play Framework 11 records MEDIUM Akka Http 2 records LOW Spray-json 2 records LOW Akka 1 record MEDIUM Akka-http 1 record LOW Akka Actor 1 record MEDIUM Akka Discovery 1 record MEDIUM Alpakka Kafka 1 record LOW

Records

2 records in Akka Http · all components

TI-2018-11531 CVE-2018-16131 · GHSA-9qgc-p27w-3hjg

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through…

Priority LOW 38

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a Z…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03054 Published 2018-08-30 Fixed in 10.1.4 CWE-400
TI-2023-16422 CVE-2023-33251 · GHSA-9f9g-qwcw-j94j

When Akka HTTP before 10.5.2 accepts file uploads via the…

Priority LOW 24

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar is…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00151 Published 2023-05-21 No fix listed CWE-732
Open these records in search →