Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash
Vulnerability Description
Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the `Data.init(base32Encoded:)` function opens up the potential for exposing server memory and/or crashing the server (Denial of Service) for applications where untrusted data can end up in said function. Vapor does not currently use this function itself so this only impact applications that use the impacted function directly or through other dependencies. The vulnerability is patched in version 4.47.2. As a workaround, one may use an alternative to Vapor's built-in `Data.init(base32Encoded:)`.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
可信数据的反序列化
Vulnerability Title
vapor 代码问题漏洞
Vulnerability Description
vapor是个人开发者的一个 Swift 的 Web 开发框架。可用于开发高性能的Web应用，支持 iOS、OS X 和 Ubuntu 系统。 Vapor 4.47.1及更早版本中存在代码问题漏洞，该漏洞源于‘Data.init(base32Encoded:)’函数中的错误为应用程序打开了暴露服务器内存和/或使服务器崩溃（拒绝服务）的可能性功能。
CVSS Information
N/A
Vulnerability Type
N/A