GitHub Advisoryadvisory · Maven

GHSA-5h9g-8xcv-qjq9 Improper Restriction of XML External Entity Reference in Stanford CoreNLP

CRITICAL Published 2022-05-24 Modified 2022-06-21 Official page ↗

Aliases: CVE-2021-3878
Ecosystem: Maven
Packages: edu.stanford.nlp:stanford-corenlp
Severity: Critical
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-611
Reviewed: 2022-06-21

Affected packages

• Maven edu.stanford.nlp:stanford-corenlp: < 4.3.1 → fixed in 4.3.1

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

Related

Alias · CVE (1)

CVE-2021-3878 corenlp is vulnerable to Improper Restriction of XML External Entity Reference vulnerability

Weakness · CWE (1)

CWE-611 Improper Restriction of XML External Entity Reference weakness

References