GitHub Advisoryadvisory · Maven

GHSA-jqfv-jrvq-95jm Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

MEDIUM Published 2024-10-09 Modified 2025-07-10 Official page ↗
Aliases
CVE-2024-28168
Ecosystem
Maven
Packages
org.apache.xmlgraphics:fop-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-611
Reviewed
2024-10-09

Affected packages

• Maven org.apache.xmlgraphics:fop-core: < 2.10 → fixed in 2.10

Description

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2024-28168 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References