Skip to content
OpenAdvisories

Package · Maven

org.bedework.caleng:bw-calendar-engine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.0
    CVE-2018-1000836

    XML External Entity (XXE) vulnerability in bw-calendar-engine

    bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be explo…

    org.bedework.caleng:bw-calendar-engine Maven