GitHub Advisoryadvisory · Maven

GHSA-88cc-g835-76rp Improper Restriction of XML External Entity Reference

HIGH Published 2022-02-10 Modified 2024-05-15 Official page ↗
Aliases
CVE-2020-13692
Ecosystem
Maven
Packages
org.postgresql:postgresql
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H
Weaknesses
CWE-611
Reviewed
2021-04-14

Affected packages

• Maven org.postgresql:postgresql: >= 9.4.1212.jre6, < 42.2.13 → fixed in 42.2.13

Description

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

Related

Alias · CVE (1)

  • CVE-2020-13692 PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE. vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References