The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
Path to dependency file: /hapi-fhir-client-okhttp/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar
Uncontrolled Resource Consumption vulnerability in Apache Commons IO.
The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.
This issue affects Apache Commons IO: from 2.0 before 2.14.0.
Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.
CVE-2024-47554 - High Severity Vulnerability
The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.
Library home page: https://www.apache.org/
Path to dependency file: /hapi-fhir-client-okhttp/pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar,/home/wss-scanner/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar
Dependency Hierarchy: - :x: **commons-io-2.11.0.jar** (Vulnerable Library)
Found in HEAD commit: b59f2d05a7d0fd10c7b03bb6f0ebf97757172a71
Found in base branch: master
Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.
Publish Date: 2024-10-03
URL: CVE-2024-47554
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1
Release Date: 2024-10-03
Fix Resolution: 2.14.0
Step up your Open Source Security Game with Mend here