Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Lightbend Component: Akka Http Clear all filters
TI-2023-16422 CVE-2023-33251 · GHSA-9f9g-qwcw-j94j

When Akka HTTP before 10.5.2 accepts file uploads via the…

Priority LOW 24

When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar is…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00151 Published 2023-05-21 No fix listed CWE-732
TI-2018-11531 CVE-2018-16131 · GHSA-9qgc-p27w-3hjg

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through…

Priority LOW 38

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a Z…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03054 Published 2018-08-30 Fixed in 10.1.4 CWE-400