CVE-2017-15707: DoS vulnerability

December 1, 2017 (updated April 26, 2019)

The REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.

References

cwiki.apache.org/confluence/display/WW/S2-054
nvd.nist.gov/vuln/detail/CVE-2017-15707

Code Behaviors & Features

Detect and mitigate CVE-2017-15707 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →