GitHub Advisoryadvisory · Maven

GHSA-rjx9-2936-9ffx Improper Input Validation in Apache Sanselan

HIGH Published 2019-05-14 Modified 2021-08-03 Official page ↗
Aliases
CVE-2018-17201
Ecosystem
Maven
Packages
org.apache.sanselan:sanselan
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2019-05-09

Affected packages

• Maven org.apache.sanselan:sanselan: <= 0.97-incubator (no fix yet)

Description

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

Related

Alias · CVE (1)

  • CVE-2018-17201 Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References