Lucene search
MitreCVELIST:CVE-2022-28366HistoryApr 21, 2022 - 10:41 p.m.
CVE-2022-28366
2022-04-2122:41:53
mitre
www.cve.org
6
neko-related html parsers
denial of service
crafted processing instruction
heap memory consumption
htmlunit-neko
cyberneko html
cve-2022-28366.
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 (also affecting OWASP AntiSamy before 1.6.6), but 1.9.22 is the last version of CyberNeko HTML. NOTE: this may be related to CVE-2022-24839.
Related
nessus
nessus
ubuntucve
ubuntucve
CVE-2022-28366
2022-04-21 00:00:00
CVE-2022-24839
2022-04-11 00:00:00
atlassian
atlassian
debiancve
debiancve
CVE-2022-28366
2022-04-21 23:15:10
CVE-2022-24839
2022-04-11 22:15:07
osv
osv
CVE-2022-28366
2022-04-21 23:15:10
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
2023-06-22 19:58:54
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-11 21:38:11
prion
prion
Input validation
2022-04-21 23:15:00
Design/Logic Flaw
2022-04-11 22:15:00
Design/Logic Flaw
2022-04-25 03:15:00
cve
cve
nvd
nvd
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2022-04-13 02:50:56
Denial Of Service (DoS)
2022-04-22 08:18:14
github
github
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-11 21:38:11
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
2023-06-22 19:58:54
Denial of service in HtmlUnit-Neko
2022-04-23 00:03:04
rubygems
rubygems
Denial of Service (DoS) in Nokogiri on JRuby
2022-04-10 21:00:00
redhatcve
redhatcve
CVE-2022-24839
2022-04-12 04:59:47
cvelist
cvelist
CVE-2022-24839 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)
2022-04-11 21:25:12
CVE-2022-29546
2022-04-25 02:54:59
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00