Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WebLogic Uncontrolled Resource Consumption Vulnerability - CVE-2022-24839 - Vulnerability Database
WebLogic

WebLogic Uncontrolled Resource Consumption Vulnerability - CVE-2022-24839

Medium
Reference: CVE-2022-24839
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-24839
Title: WebLogic Uncontrolled Resource Consumption Vulnerability
Overview:

org.cyberneko.html is an html parser written in Java. The fork of org.cyberneko.html used by Nokogiri (Rubygem) raises a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup. Users are advised to upgrade to gt 1.9.22.noko2. Note: The upstream library org.cyberneko.html is no longer maintained. Nokogiri uses its own fork of this library located at https://github.com/sparklemotion/nekohtml and this CVE applies only to that fork. Other forks of nekohtml may have a similar vulnerability.