VYPR
Medium severity4.3NVD Advisory· Published Oct 3, 2024· Updated Jun 17, 2026

CVE-2024-47554

CVE-2024-47554

Description

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
commons-io:commons-ioMaven
>= 2.0, < 2.14.02.14.0

Affected products

295

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.