CVEvulnerability
CVE-2022-31005
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-05-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-190
Description
Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. Version 4.60.3 contains a patch for this issue. As a workaround, disable FileMiddleware and serve via a Content Delivery Network.
Affected configurations
• vapor vapor (< 4.60.3)
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://github.com/vapor/vapor/commit/953a349b539b3e0d3653585c8ffb50c427986df1 Patch, Third Party Advisory
- https://github.com/vapor/vapor/releases/tag/4.60.3 Release Notes, Third Party Advisory
- https://github.com/vapor/vapor/security/advisories/GHSA-vj2m-9f5j-mpr5 Exploit, Third Party Advisory
- https://github.com/vapor/vapor/commit/953a349b539b3e0d3653585c8ffb50c427986df1 Patch, Third Party Advisory
- https://github.com/vapor/vapor/releases/tag/4.60.3 Release Notes, Third Party Advisory
- https://github.com/vapor/vapor/security/advisories/GHSA-vj2m-9f5j-mpr5 Exploit, Third Party Advisory