CX: CVE-2022-0084 in Maven-org.jboss.xnio:xnio-api and 3.3.8.Final @ JavaVulnerableLab-1.refs/heads/master

[github-actions[bot]]

Description

A flaw was found in XNIO versions prior to 3.8.8.Final, specifically in the "notifyReadClosed" method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

HIGH Vulnerable Package issue exists @ org.jboss.xnio:xnio-api in branch refs/heads/master

Vulnerability ID: CVE-2022-0084

Package Name: org.jboss.xnio:xnio-api

Severity: HIGH

CVSS Score: 7.5

Publish Date: 2022-08-26T05:53:00

Current Package Version: 3.3.8.Final

Remediation Upgrade Recommendation: 3.5.10.Final

Link To SCA

Reference – NVD link

[github-actions[bot]]

Issue still exists.