​
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-g37r-p8hp-mp2c

Published

Last updated

https://images.chainguard.dev/security/CGA-g37r-p8hp-mp2c
Package

management-api-for-apache-cassandra-4.0

Latest Update
Fixed
Fixed Version

0.1.89-r0

Aliases
  • CVE-2024-47554
  • GHSA-78wr-2p64-hpwj

Severity

7.5

High

CVSS V3

Summary

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Description

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images