Not rated

CVE-2024-47554 Uncontrolled Resource Consumption vulnerability in Apache Commons IO

Description

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache Commons IO 2.0	2.0 → < 2.14.0	2.14.0

References

lists.apache.org lists.apache.org

Timeline

Published October 3, 2024
Last modified January 31, 2025

The 2 CVEs of Apache Commons IO →

CVE-2021-29425 In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like… 6.5 Medium

Track this CVE

CVE-2024-47554 Uncontrolled Resource Consumption vulnerability in Apache Commons IO

Description

Affected products and versions

References

Timeline

Other CVEs of Apache Commons IO