Skip to content
OpenAdvisories

Package · Maven

com.itextpdf:itextpdf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2017-9096 Public exploit

    Improper Restriction of XML External Entity Reference in iText

    The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.

    com.itextpdf:itextpdf com.lowagie:itext Maven