← Back

Commons Io

commons_io

Vendor: Apache • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-47554
2Apache
Netapp
8Active Iq Unified Manager
BluexpCommons Io+5 more
Jun 17, 2026
Oct 3, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue a...Show more
Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.Show less
CVE-2021-29425
4Apache
DebianNetapp+1 more
60Access Manager
Active Iq Unified ManagerAgile Engineering Data Management+57 more
Jun 17, 2026
Apr 13, 2021
N/A· v4
4.8 MEDIUM· v3
5.8 MEDIUM· v2
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files...Show more
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.Show less