Description

** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.

Remediation

References

https://lists.apache.org/thread/713tk23khbtbg940pb2ql8ggd4cvh6j1

Related Vulnerabilities

CVE-2021-25640 Vulnerability in maven package org.apache.dubbo:dubbo

CVE-2011-3389 Vulnerability in npm package faye

CVE-2019-17556 Vulnerability in maven package org.apache.olingo:odata-client-proxy

CVE-2020-13933 Vulnerability in maven package org.apache.shiro:shiro-web

CVE-2019-10418 Vulnerability in maven package io.fabric8.pipeline:kubernetes-pipeline-arquillian-steps

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Tags

Mailing List Vendor Advisory NVD-CWE-noinfo