CVEvulnerability

CVE-2024-31573

4.0 MEDIUM Published 2025-10-17 Modified 2026-10-02 Official page ↗
Status
Deferred
Published
2025-10-17
Last modified
2026-10-02
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.0 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-669

Description

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.

Related

Weakness · CWE (1)

  • CWE-669 Incorrect Resource Transfer Between Spheres weakness

References