CVE-2018-17201
Improper Input Validation in Apache Sanselan
Summary
Improper Input Validation in Apache Sanselan
Original description
The description as published by the source.
Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Maven
org.apache.sanselan:sanselan
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.97-incubator"}]}]
References
- advisory nvd.nist.gov
- web lists.apache.org