Description
MetadataExtractor 2.1.0 allows stack consumption.
Remediation
References
https://github.com/drewnoakes/metadata-extractor-dotnet/pull/190
https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E
Related Vulnerabilities
CVE-2017-5645 Vulnerability in maven package org.apache.logging.log4j:log4j
CVE-2022-1330 Vulnerability in maven package org.webjars.bower:fullpage.js
CVE-2010-3449 Vulnerability in maven package org.codehaus.redback:redback-system
CVE-2023-35157 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2023-46650 Vulnerability in maven package com.coravy.hudson.plugins.github:github