GitHub Advisoryadvisory · Maven

GHSA-2gpr-j5vj-wvh2 Apache Any23 vulnerable to excessive memory usage

MEDIUM Published 2023-07-05 Modified 2023-07-12 Official page ↗

Aliases: CVE-2023-34150
Ecosystem: Maven
Packages: org.apache.any23:apache-any23
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weaknesses: CWE-20, CWE-400
Reviewed: 2023-07-06

Affected packages

• Maven org.apache.any23:apache-any23: <= 2.7 (no fix yet)

Description

Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.

Related

Alias · CVE (1)

CVE-2023-34150 ** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage. vulnerability

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-400 Uncontrolled Resource Consumption weakness

References