CVE-2022-23437
Infinite loop within Apache XercesJ xml parser
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 4.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
24 ene 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.
Productos afectados
Apache Software Foundation · Apache Xerces¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →