GitHub Advisoryadvisory · Maven

GHSA-fcrx-8829-jpqx Improper Restriction of XML External Entity Reference in wutka jox

MEDIUM Published 2022-04-01 Modified 2022-04-01 Official page ↗

Aliases: CVE-2021-43142
Ecosystem: Maven
Packages: com.wutka:jox
Severity: Moderate
Weaknesses: CWE-611
Reviewed: 2022-04-01

Affected packages

• Maven com.wutka:jox: <= 1.16 (no fix yet)

Description

An XML External Entity (XXE) vulnerability exists in wutka jox 1.16 in the readObject method in JOXSAXBeanInput.

Related

Alias · CVE (1)

CVE-2021-43142 An XML External Entity (XXE) vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput. vulnerability

Weakness · CWE (1)

CWE-611 Improper Restriction of XML External Entity Reference weakness

References