CVE-2018-18854

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-10-31

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Spray-json (Lightbend)

References

• https://github.com/spray/spray-json/issues/277