漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash
Vulnerability Description
Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the `Data.init(base32Encoded:)` function opens up the potential for exposing server memory and/or crashing the server (Denial of Service) for applications where untrusted data can end up in said function. Vapor does not currently use this function itself so this only impact applications that use the impacted function directly or through other dependencies. The vulnerability is patched in version 4.47.2. As a workaround, one may use an alternative to Vapor's built-in `Data.init(base32Encoded:)`.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
可信数据的反序列化
Vulnerability Title
vapor 代码问题漏洞
Vulnerability Description
vapor是个人开发者的一个 Swift 的 Web 开发框架。可用于开发高性能的Web应用，支持 iOS、OS X 和 Ubuntu 系统。 Vapor 4.47.1及更早版本中存在代码问题漏洞，该漏洞源于‘Data.init(base32Encoded:)’函数中的错误为应用程序打开了暴露服务器内存和/或使服务器崩溃（拒绝服务）的可能性功能。
CVSS Information
N/A
Vulnerability Type
N/A