You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Arnout Engelen <en...@apache.org> on 2023/07/04 12:16:34 UTC

CVE-2023-34150: Apache Any23: Possible excessive allocation of resources reading input.

Affected versions:

- Apache Any23 through 2.7

Description:

** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.

Credit:

Liran Mendelovich (finder)

References:

https://attic.apache.org/projects/any23.html
https://www.cve.org/CVERecord?id=CVE-2023-34150