CVE-2023-3782

MediumCVSS 5.9

Published: 19/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

CVE-2023-3782 affects the OkHttp client, which can experience a denial of service (DoS) when using BrotliInterceptor while visiting a malicious web server or when an attacker can perform a MitM attack to inject a Brotli zip-bomb into an HTTP response.

Risk Assessment

Organizations may be vulnerable to DoS attacks that could lead to service unavailability and potential financial and reputational losses.

Recommendation

It is recommended to update the OkHttp client to the latest version and monitor network traffic for potential MitM attacks.

Original NVD description (English source)

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response