Apache Any23 vulnerable to excessive memory usage

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-34150 · ADVISORY
• apache/any23 · PACKAGE
• lists.apache.org/thread/713tk23khbtbg940pb2ql8ggd4cvh6j1 · WEB

Mais vulnerabilidades de org.apache.any23:apache-any23

• CVE-2022-25312CRÍTICO 9.1An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 …
• CVE-2021-40146CRÍTICO 9.8A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5.…
• CVE-2021-38555CRÍTICO 9.1An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions…