CVE-2022-37312
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
OX App Suite up to version 7.10.6 is vulnerable to excessive resource consumption when processing unusually large request bodies that include redirect URLs. An attacker can exploit this to overload the server, causing performance degradation or service disruption.
The deferrer servlet in OX App Suite 7.10.6 and earlier lacks proper input validation on request body size, allowing unauthenticated or authenticated attackers to submit large payloads with redirect URLs that consume excessive server resources. This can lead to denial of service through CPU or memory exhaustion without requiring privilege escalation.