high7.5
CVE-2023-34624
htmlcleaner vulnerable to stack exhaustion
Impact
An issue was discovered htmlcleaner through version 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | net.sourceforge.htmlcleaner:htmlcleaner | < 2.29 | 2.29 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Htmlcleaner Project | Htmlcleaner | through 2.28 |