GitHub Advisoryadvisory · Maven

GHSA-24wf-7vf2-pv59 XXE vulnerability on Launch import with externally-defined DTD file

HIGH Published 2021-06-28 Modified 2021-06-25 Official page ↗
Aliases
CVE-2021-29620
Ecosystem
Maven
Packages
com.epam.reportportal:service-api
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-611
Reviewed
2021-06-25

Affected packages

• Maven com.epam.reportportal:service-api: >= 3.1.0, < 5.4.0 → fixed in 5.4.0

Description

Impact Starting from version 3.1.0 we introduced a new feature of JUnit XML launch import. Unfortunately XML parser was not configured properly to prevent XML external entity (XXE) attacks. This allows a user to import a specifically-crafted XML file which imports external Document Type Definition (DTD) file with external entities for extraction of secrets from Report Portal service-api module or server-side request forgery. Patches Fixed with: https://github.com/reportportal/service-api/pull/1392 Binaries `docker pull reportportal/service-api:5.4.0` https://github.com/reportportal/service-api/packages/846871?version=5.4.0 For more information If you have any questions or comments about this advisory email us: [email protected]

Related

Alias · CVE (1)

  • CVE-2021-29620 Report portal is an open source reporting and analysis framework. vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References