Akka Http
Lightbend · 2 CVEs
CVE-2023-33251
MEDIUM
When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary f…
May 21, 2023
CVE-2018-16131
HIGH
The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0…
Aug 30, 2018
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2023-33251 | When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions:… | MEDIUM | 0.15% | May 21, 2023 |
| CVE-2018-16131 | The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a de… | HIGH | 3.05% | Aug 30, 2018 |
Showing 1 to 2 of 2 CVEs