GitHub Advisoryadvisory · Maven

GHSA-75vw-3m5v-fprh corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CRITICAL Published 2022-01-21 Modified 2026-04-14 Official page ↗
Aliases
CVE-2022-0239
Ecosystem
Maven
Packages
edu.stanford.nlp:stanford-corenlp
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-611
Reviewed
2022-01-19

Affected packages

• Maven edu.stanford.nlp:stanford-corenlp: < 4.4.0 → fixed in 4.4.0

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

Related

Alias · CVE (1)

  • CVE-2022-0239 corenlp is vulnerable to Improper Restriction of XML External Entity Reference vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References