CVE-2024-21651

CVSS V2 None CVSS V3 None

Description

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU consumption. This vulnerability has been patched in XWiki 14.10.18, 15.5.3 and 15.8 RC1.

Overview

CVE ID
CVE-2024-21651

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-01-08T23:30:03.580Z

Last Modified Date
2024-01-08T23:30:03.580Z

Weakness Enumerations

CWE	URL
CWE-400	http://cwe.mitre.org/data/definitions/400.html

References

Reference URL	Reference Tags
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-8959-rfxh-r4j4	x_refsource_CONFIRM
https://jira.xwiki.org/browse/XCOMMONS-2796	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-21651
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21651

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 15:26:16				Added to TrackCVE