Threats tagged 'ghsa-6qx5-4pcm-5fgh'

Apache Axis2/Java versions through 2.0.1 have a resource allocation vulnerability where multipart/form-data and application/x-www-form-urlencoded message builders do not limit request body size, bypassing servlet container post-size limits and failing to delete temporary files. This allows unauthenticated attackers to exhaust memory or disk resources. The issue is fixed in version 2.0.2 by adding configurable size limits and proper cleanup of temporary files.