Denial Of Service (DoS)

2022-12-0903:36:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

vulnerability

client hints

arrayindexoutofboundsexception

user-agent string

security issue

EPSS

0.001

Percentile

39.3%

JSON

yauaa is vulnerable to denial of service. The vulnerability exists due to ClientHintsAnalyzer.java improperly handling client hints, allowing an attacker to crash the application through the ArrayIndexOutOfBoundsException by passing a malicious user-agent string when using the client hint analysis feature.