CVE-2023-42503
1 advisory.
Maven/org.apache.commons:commons-compress CVE-2023-42503: medium 5.5
Apache Commons Compress denial of service vulnerability
Action: Upgrade org.apache.commons:commons-compress to 1.24.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.22 | 1.24.0 | - |
Fixed versions
| 1.24.0 |
Sources
- osv: GHSA-cgwf-w82q-5jrr
- https://nvd.nist.gov/vuln/detail/CVE-2023-42503
- https://github.com/apache/commons-compress/commit/aae38bfb820159ae7a0b792e779571f6a46b3889
- https://github.com/apache/commons-compress
- https://lists.apache.org/thread/5xwcyr600mn074vgxq92tjssrchmc93c
- https://security.netapp.com/advisory/ntap-20231020-0003
CVE-2023-42503 · published · modified · JSON