| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.xmlrpc:xmlrpc-common | ≤ 3.1.3 | |
| ws-xmlrpc | = 3.1.3 |
The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free