Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-12-30T01:00:00

Updated: 2024-08-07T00:09:18.436Z

Reserved: 2011-11-17T00:00:00

Link: CVE-2011-4461

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-12-30T01:55:01.313

Modified: 2019-03-08T11:29:00.367

Link: CVE-2011-4461

cve-icon Redhat

Severity : Low

Publid Date: 2011-12-28T00:00:00Z

Links: CVE-2011-4461 - Bugzilla