CVE-2024-47554

Published

Last updated

NVD

CGA ID

Severity

Unknown

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.