Vendor/product archive

apache / commons_io CVEs

Beta · best-effort

2 CVEs tagged to apache / commons_io — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2024-47554

Published Oct 3, 2024

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-29425

Published Apr 13, 2021

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value…

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1