Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack when parsing policies due to runtime memory exhaustion. Users are recommended to upgrade to version 3.2.3, which fixes this issue.
| Vendor | Product | Versions |
|---|---|---|
| apache | neethi | 0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| ibm | qradar siem | cert_advisory | 90% |
| ibm | websphere application server liberty | cert_advisory | 90% |
Loading…
