GitHub Advisoryadvisory · Maven

GHSA-8gf7-w3cp-gfh3 Improper Restriction of XML External Entity Reference in Stanford CoreNLP

HIGH Published 2022-05-24 Modified 2022-06-21 Official page ↗

Aliases: CVE-2021-3869
Ecosystem: Maven
Packages: edu.stanford.nlp:stanford-corenlp
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-611
Reviewed: 2022-06-21

Affected packages

• Maven edu.stanford.nlp:stanford-corenlp: < 4.3.1 → fixed in 4.3.1

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

Related

Alias · CVE (1)

CVE-2021-3869 corenlp is vulnerable to Improper Restriction of XML External Entity Reference vulnerability

Weakness · CWE (1)

CWE-611 Improper Restriction of XML External Entity Reference weakness

References