Threats tagged 'ghsa-78w3-p65q-wwh7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-120367axis2-java-core · Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java High2026-11-09GCVE DatabaseCVE-2026-120367 Apache Axis2/Java versions through 2.0.1 contain a vulnerability where JSON message builders buffer the entire request body without size limits, allowing unauthenticated attackers to exhaust server memory with large JSON requests. This resource exhaustion issue is fixed in version 2.0.2 by introducing a configurable jsonMaxRequestSize parameter to limit JSON request sizes. Report on CVE-2026-120367 Vulnerability CWE-770 #ghsa-78w3-p65q-wwh7	GCVE Database	2026-11-09

Page 1 of 1