HIGH7.5
GHSA-78wr-2p64-hpwj
Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader
Quick fix
GHSA-78wr-2p64-hpwj — commons-io:commons-io: upgrade to the fixed version with the command below.
# pom.xml: bump <version>2.14.0</version> for commons-io:commons-ioDetails
Uncontrolled Resource Consumption vulnerability in Apache Commons IO.
The `org.apache.commons.io.input.XmlStreamReader` class may excessively consume CPU resources when processing maliciously crafted input.
This issue affects Apache Commons IO: from 2.0 before 2.14.0.
Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/commons-io:commons-io
Introduced in:
2.0Fixed in: 2.14.0Fix
# pom.xml: bump <version>2.14.0</version> for commons-io:commons-io