CVE-2022-34169

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-34169
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34169.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-34169
Aliases
Downstream
Related
Published
2022-07-19T18:15:11.740Z
Modified
2026-03-02T01:35:47.682223Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.

References

Affected packages

Git / github.com/openjdk/jdk15u

Affected ranges

Type
GIT
Repo
https://github.com/openjdk/jdk15u
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
38378b7ee032d70653b3f0d4205f2305cf4f1170
Introduced
4a588d89f01a650d90432cc14697a5a2ae2c97d3
Last affected
02e3b1dd58b824d5a9b44ff3cf2f53061b5c5ffd

Affected versions

Other
jdk-15+36
jdk-15-ga

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34169.json"