Skip to content
OpenAdvisories

Package · Maven

org.apache.any23:apache-any23

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.5
    CVE-2023-34150

    Apache Any23: Possible excessive allocation of resources reading input.

    ** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.

    Apache Software Foundation Apache Any23 org.apache.any23:apache-any23 Maven
  • Critical 9.1
    CVE-2022-25312

    An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor

    An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions < 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attack…

    Apache Software Foundation Apache Any23 org.apache.any23:apache-any23 Maven
  • Critical 9.8
    CVE-2021-40146

    A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java

    A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5. RCE vulnerabilities allow a malicious actor to execute any code of their choice on a remote machine over LAN, WAN, or …

    Apache Software Foundation Apache Any23 org.apache.any23:apache-any23 Maven
  • Critical 9.1
    CVE-2021-38555

    An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java

    An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions < 2.5. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to in…

    Apache Software Foundation Apache Any23 org.apache.any23:apache-any23 Maven