Not rated

CVE-2024-47554 Uncontrolled Resource Consumption vulnerability in Apache Commons IO

Description

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache Commons IO 2.0	2.0 → < 2.14.0	2.14.0

The 2 CVEs of Apache Commons IO →

CVE-2021-29425 In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like… 6.5 Medium

Do you use Apache Commons IO?

Track this CVE Watch Apache Commons IO Check my SBOMs

www.cveye.io/en/cve/CVE-2024-47554

Timeline

Published October 3, 2024
Last modified January 31, 2025

References

lists.apache.org lists.apache.org

Track this CVE

CVE-2024-47554 Uncontrolled Resource Consumption vulnerability in Apache Commons IO

Description

Affected products and versions

Other CVEs of Apache Commons IO