org.apache.jackrabbit:oak-run@1.4.23 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.apache.jackrabbit:oak-run package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Denial of Service (DoS) `org.apache.jackrabbit:oak-run` MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.	[1.0.9,1.5.2]