CVE-2024-21651

Summary

CVE-2024-21651 is a denial-of-service vulnerability affecting the XWiki Platform. A user can exploit this weakness by attaching a manipulated TAR file to a page, altering file modification times headers. When this file is parsed by Tika, it causes excessive CPU consumption, leading to a denial-of-service condition. This issue has been addressed in XWiki versions 14.10.18, 15.5.3, and 15.8 RC1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.