CVE-2023-3782 – DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

https://notcve.org/view.php?id=CVE-2023-3782

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response • https://github.com/square/okhttp/issues/7738 https://research.jfrog.com/vulnerabilities/okhttp-client-brotli-dos • CWE-400: Uncontrolled Resource Consumption •