CVE-2024-47554 | Apache Commons IO up to 2.13.x org.apache.commons.io.input.XmlStreamReader resource consumption

A vulnerability was found in Apache Commons IO up to 2.13.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component org.apache.commons.io.input.XmlStreamReader. The manipulation leads to resource consumption.

This vulnerability is known as CVE-2024-47554. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.