Description

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.

Remediation

References

CVE-2022-23437

Related Vulnerabilities

PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-1803)

WordPress Plugin Logo Carousel Cross-Site Request Forgery (1.7.4)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41183)

Jenkins Incorrect Authorization Vulnerability (CVE-2021-21692 )

MySQL CVE-2020-14771 Vulnerability (CVE-2020-14771)

Severity

Medium

Classification

CVE-2022-23437 CWE-835 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities