CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects Apache. Its EPSS score suggests a 41.9% probability of exploitation in the next 30 days.
CVE
CVE-2022-22721
Severity
CRITICAL
CVSS
9.1
EPSS
41.86%
Apache
Original NVD Description
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.
Related CVEs
Other vulnerabilities affecting the same vendor(s)