{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T04:51:56.117","vulnerabilities":[{"cve":{"id":"CVE-2023-34054","sourceIdentifier":"security@vmware.com","published":"2023-11-28T09:15:07.147","lastModified":"2026-06-17T06:02:49.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nIn Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.\n\nSpecifically, an application is vulnerable if Reactor Netty HTTP Server built-in integration with Micrometer is enabled.\n\n\n\n\n"},{"lang":"es","value":"En Reactor Netty HTTP Server, versiones 1.1.x anteriores a 1.1.13 y versiones 1.0.x anteriores a 1.0.39, es posible que un usuario proporcione solicitudes HTTP especialmente manipuladas que pueden causar una condición de denegación de servicio (DoS). Específicamente, una aplicación es vulnerable si la integración integrada del servidor HTTP Reactor Netty con Micrometer está habilitada."}],"affected":[{"source":"security@vmware.com","affectedData":[{"vendor":"Spring","product":"Reactor Netty","defaultStatus":"unaffected","platforms":["Windows","MacOS","Linux","iOS","Android","x86","ARM","64 bit","32 bit"],"versions":[{"version":"1.1.0","lessThan":"1.1.13","versionType":"1.1.13","status":"affected"},{"version":"1.0.0","lessThan":"1.0.39","versionType":"1.0.39","status":"affected"},{"version":"older unsupported versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal:reactor_netty:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.39","matchCriteriaId":"BCFB064D-FAE3-4EB7-9B1F-327C9F4244EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal:reactor_netty:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"6C4793FB-0D8F-4B59-A9A7-22CFCA249735"}]}]}],"references":[{"url":"https://spring.io/security/cve-2023-34054","source":"security@vmware.com","tags":["Vendor Advisory"]},{"url":"https://spring.io/security/cve-2023-34054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}