Published: 11/04/2022 Updated: 23/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users are advised to upgrade to `>= 1.9.22.noko2`. Note: The upstream library `org.cyberneko.html` is no longer maintained. Nokogiri uses its own fork of this library located at github.com/sparklemotion/nekohtml and this CVE applies only to that fork. Other forks of nekohtml may have a similar vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nekohtml project nekohtml
oracle weblogic server 12.2.1.3.0
oracle weblogic server 12.2.1.4.0
oracle weblogic server 14.1.1.0.0

Debian Bug report logs - #1021739 nekohtml: CVE-2022-24839 Package: src:nekohtml; Maintainer for src:nekohtml is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Thu, 13 Oct 2022 19:21:01 UTC Severity: grave Tags: security, upstream R ...

orgcybernekohtml is an html parser written in Java The fork of `orgcybernekohtml` used by Nokogiri (Rubygem) raises a `javalangOutOfMemoryError` exception when parsing ill-formed HTML markup Users are advised to upgrade to `>= 1922noko2` Note: The upstream library `orgcybernekohtml` is no longer maintained Nokogiri uses its own fo ...

CodeQL workshop - Investigating CVE-2022-24839 We will be investigating CVE-2022-24839 in this workshop Setup: Using CLI version 290 and CodeQL lib version 290 If you are on OSX, after downloading the CLI and library, you will need to clear the extra attributes set on the zips using the following: xattr -c *zip Database creation: Pre-made databases can be downloaded from

CWE-400 https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv https://www.oracle.com/security-alerts/cpujul2022.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1021739 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2022-24839

CVE-2022-24839

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect