Vulnerability CVE-2023-3782
Published: 2023-07-19

Description:
DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

 References:
https://research.jfrog.com/vulnerabilities/okhttp-client-brotli-dos/
https://github.com/square/okhttp/issues/7738
Copyright 2026, cxsecurity.com

 

Back to Top