CVE-2022-25312

The CVE-2022-25312 vulnerability concerns the Apache Any23 project, specifically the RDFa XSLTStylesheet extractor. Affected versions are Any23

CVE-2021-40146

CVE-2021-40146 concerns a Remote Code Execution (RCE) in the Apache Any23 project, specifically in the YAMLExtractor.java file. The vulnerability is described as affecting Any23 versions earlier than 2.5, enabling an attacker to execute arbitrary code on a remote system over network connections. ...

CVE-2021-38555

Apache Any23 is affected by CVE-2021-38555 due to an XML External Entity (XXE) vulnerability in StreamUtils.java, affecting versions before 2.5. The issue allows an attacker to manipulate XML processing and potentially view server files or reach back‑end systems accessible to the application. Rem...

CVE-2023-34150

CVE-2023-34150 affects Apache Any23 due to a flaw in TikaEncodingDetector that can cause excessive memory usage, potentially leading to denial of service. The vulnerability is documented across multiple sources (CVE records and related advisories), describing memory overuse as the primary impact....