CVE-2018-17201
Improper Input Validation in Apache Sanselan
Résumé
Improper Input Validation in Apache Sanselan
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Maven
org.apache.sanselan:sanselan
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.97-incubator"}]}]
Références
- advisory nvd.nist.gov
- web lists.apache.org