Lucene search
GoogleOSV:CVE-2022-28366HistoryApr 21, 2022 - 11:15 p.m.
CVE-2022-28366
2022-04-2123:15:10
Google
osv.dev
5
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 (also affecting OWASP AntiSamy before 1.6.6), but 1.9.22 is the last version of CyberNeko HTML. NOTE: this may be related to CVE-2022-24839.
Related
atlassian
atlassian
debiancve
debiancve
CVE-2022-28366
2022-04-21 23:15:10
CVE-2022-24839
2022-04-11 22:15:07
ubuntucve
ubuntucve
CVE-2022-28366
2022-04-21 00:00:00
CVE-2022-24839
2022-04-11 00:00:00
cvelist
cvelist
CVE-2022-28366
2022-04-21 22:41:53
CVE-2022-24839 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)
2022-04-11 21:25:12
CVE-2022-29546
2022-04-25 02:54:59
nessus
nessus
cve
cve
nvd
nvd
prion
prion
Input validation
2022-04-21 23:15:00
Design/Logic Flaw
2022-04-11 22:15:00
Design/Logic Flaw
2022-04-25 03:15:00
ibm
ibm
osv
osv
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-11 21:38:11
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
2023-06-22 19:58:54
CVE-2022-24839
2022-04-11 22:15:07
github
github
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
2023-06-22 19:58:54
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-11 21:38:11
Denial of service in HtmlUnit-Neko
2022-04-23 00:03:04
veracode
veracode
Denial Of Service (DoS)
2022-04-13 02:50:56
Denial Of Service (DoS)
2022-04-22 08:18:14
redhatcve
redhatcve
CVE-2022-24839
2022-04-12 04:59:47
rubygems
rubygems
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-10 21:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00