GHSA-c438-6f6r-pg8w
4thline cling uPnP protocol issue can lead to denial of service
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.fourthline.cling:cling-core | >= 2.0.0, <= 2.1.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked `CALLBACK` parameter in the request header. As of 2022, 4thline cling is no longer supported by the maintainers.
References
External links from the advisory. They lead to third-party sites.