VYPR
← All advisories
High severityNVD Advisory· Published Oct 3, 2024· Updated Jan 31, 2025

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

CVE-2024-47554

Description

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
commons-io:commons-ioMaven
>= 2.0, < 2.14.02.14.0

Affected products

284

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.