Skip to content
OpenAdvisories

Package · Debian

freecad

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parser

    FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader() parses attacker-controlled Document.xml from a crafted .FCStd archive without d…