CVE-2023-3782 Information

Description

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

Reference

https://research.jfrog.com/vulnerabilities/okhttp-client-brotli-dos/ https://github.com/square/okhttp/issues/7738