Package · Debian

libquartz-java

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

Critical 9.8

CVE-2019-13990 EPSS 17%

XML external entity injection in Terracotta Quartz Scheduler

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

libquartz2-java libquartz2-java libquartz-java org.quartz-scheduler:quartz Debian Ubuntu Maven

Jul 26, 2019