Skip to content
OpenAdvisories

Package · Maven

org.codelibs.fess:fess

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2018-1000822

    XML External Entity (XXE) vulnerability in codelibs fess

    codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via speciall…

    org.codelibs.fess:fess Maven