Vulnerabilities > CVE-2024-26308 - Unspecified vulnerability in Apache Commons Compress

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
apache
NVD
Published: 2024-02-19
Updated: 2024-11-21

Summary

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

Vulnerable Configurations

Part Description Count
Application
Apache
5

References