GitHub Advisoryadvisory · Maven

GHSA-rmm5-g63h-m6g9 Improper Restriction of XML External Entity Reference in pippo-core

CRITICAL Published 2018-12-19 Modified 2024-03-04 Official page ↗

Aliases: CVE-2018-20059
Ecosystem: Maven
Packages: ro.pippo:pippo-core
Severity: Critical
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-611
Reviewed: 2020-06-16

Affected packages

• Maven ro.pippo:pippo-core: < 1.12.0 → fixed in 1.12.0

Description

jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

Related

Alias · CVE (1)

CVE-2018-20059 jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE. vulnerability

Weakness · CWE (1)

CWE-611 Improper Restriction of XML External Entity Reference weakness

References