CVE-2026-59323: CVE-2026-59323: güvenlik açığı

Açıklama (NVD)

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.4.13 and earlier

Özet bilgiler

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

%0,40 (yüzdelik 35)

CWE

CWE-770

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• spring.io
• CWE-770