Apache Any23 (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-07-05. Vendor: Apache Software Foundation.

CVEs of Apache Any23

• CVE-2023-34150 - CVSS 6.5 (medium), 2023-07-05: ** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.
• CVE-2022-25312 - CVSS 9.1 (critical), 2022-03-05: An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions < 2.7.…
• CVE-2021-40146 - CVSS 9.8 (critical), 2021-09-11: A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5. RCE…
• CVE-2021-38555 - CVSS 9.1 (critical), 2021-09-11: An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions < 2.5. XML…