CVE-2022-33879

The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.

• http://www.openwall.com/lists/oss-security/2022/06/27/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfhMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220812-0004/Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/06/27/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfhMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220812-0004/Third Party Advisory

Published

Jun 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33873An improper neutralization of special elements used in an OS…9.8
• CVE-2022-33874An improper neutralization of special elements used in an OS…9.8
• CVE-2022-33875An improper neutralization of special elements used in an SQ…8.8
• CVE-2022-33876Multiple instances of improper input validation vulnerabilit…6.5
• CVE-2022-33877An incorrect default permission [CWE-276] vulnerability in F…5.5
• CVE-2022-33878An exposure of sensitive information to an unauthorized acto…5.5
• CVE-2022-3388An input validation vulnerability exists in the Monitor Pro …7.8
• CVE-2022-33880hms-staff.php in Projectworlds Hospital Management System Mi…9.8
• CVE-2022-33881Parsing a maliciously crafted PRT file can force Autodesk Au…7.8
• CVE-2022-33882Under certain conditions, an attacker could create an uninte…9.8
• CVE-2022-33883A malicious crafted file consumed through Moldflow Synergy, …7.8
• CVE-2022-33884Parsing a maliciously crafted X_B file can force Autodesk Au…7.5