Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded.
Red Hat Integration Camel Extensions For Quarkus 2.13.2
Released 2023-01-26 · Red Hat rating Moderate · View on Red Hat →
Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded.
Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled.
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS).
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays.
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).