5.3Orta

CVE-2026-59323Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

Spring Micrometer Tracing Yayım: (2 ay önce)

Açıklama

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.4.13 and earlier

Zayıflık türü (CWE): CWE-770

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Spring Micrometer Tracing 1.7.0, 1.6.0 – ≤ 1.6.6, 1.5.0 – ≤ 1.5.12, ≤ 1.4.13

Kaynaklar ve yamalar