Threats tagged 'ghsa-526f-jxpj-jmg2'

Apache Thrift versions before 0.23.0 are affected by multiple vulnerabilities including path traversal, HTTP request/response splitting, and uncontrolled resource consumption. These issues allow attackers to manipulate file paths, inject CRLF sequences in HTTP headers, and potentially exhaust system resources. The vulnerabilities have a high severity score of 7.3 CVSS v3.1. Users should upgrade to version 0.23.0 to address these flaws.