Package · Maven

com.twelvemonkeys.imageio:imageio-metadata

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.3

CVE-2021-23792

XML External Entity (XXE) Injection

The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An attacker can exploit this vulnerability if they are able to supp…

com.twelvemonkeys.imageio:imageio-metadata libtwelvemonkeys-java libtwelvemonkeys-java Debian Ubuntu Maven

May 6, 2022