title: Denial of service in mod_lua r:parsebody
description: In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size.
problem types: CWE-770: Allocation of Resources Without Limits or Throttling
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 2.4.53, status: affected, version: unspecified, versionType: custom
}
metrics:
other: [
content: {'other': 'low'}
type: unknown
]