Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 6.0 | libxalan2-java | 2.7.1-5+deb6u1 |
| Debian · 7 | libxalan2-java | 2.7.1-7+deb7u1 |
Vulnerabilities 1
-
High —CVE-2014-0107 EPSS 14%
Improper Authorization in Apache Xalan-Java
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access exte…