What is GHSA-rjx9-2936-9ffx?

GHSA-rjx9-2936-9ffx is a security advisory published by GitHub Security Advisories with High severity. Improper Input Validation in Apache Sanselan

Which CVE IDs does GHSA-rjx9-2936-9ffx cover?

GHSA-rjx9-2936-9ffx covers the following CVE IDs: CVE-2018-17201. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rjx9-2936-9ffx?

GHSA-rjx9-2936-9ffx has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-rjx9-2936-9ffx?

GHSA-rjx9-2936-9ffx affects 1 product, including: maven/org.apache.sanselan:sanselan:\u003c= 0.97-incubator.

GHSA-rjx9-2936-9ffxHighCVSS 7.5

Improper Input Validation in Apache Sanselan

Vendor

GitHub Security Advisories

Published

May 14, 2019

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2018-17201 →

📋 Description

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.

🎯 Affected products1

maven/org.apache.sanselan:sanselan:<= 0.97-incubator

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2018-17201
https://lists.apache.org/thread.html/cd37861963aa6d2694c8947d464c99614d3e1a9db6c1a2a8b7b5840a@%3Cdev.commons.apache.org%3E
https://github.com/advisories/GHSA-rjx9-2936-9ffx