CVE-2016-5004

CVE-2016-5004

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.7%
exploitation probability
7.7%top 5% of all CVEs
observed exploitation
nono source reports it
The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.
Affected products
n/a · n/a