1 result · Feed
-
Medium 6.5
XML External Entity Reference in jbpmmigration
It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potential…