Apache Any23 vulnerable to excessive memory usage

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-34150 · ADVISORY
• apache/any23 · PACKAGE
• lists.apache.org/thread/713tk23khbtbg940pb2ql8ggd4cvh6j1 · WEB

org.apache.any23:apache-any23 のその他の脆弱性

• CVE-2022-25312緊急 9.1An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 …
• CVE-2021-40146緊急 9.8A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5.…
• CVE-2021-38555緊急 9.1An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions…