CVE-2026-66143
Vulnerability Description
It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3.2.2 via certain crafted policies, which may lead to a denial of service attack via resource consumption. Users are recommended to upgrade to version 3.2.3, which fixes this issue.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-400
Source
NVD
Vendor
Apache Software Foundation
Product
Apache Neethi
Discussion (0)
Add Comment
No comments yet. Be the first!