Skip to content
OpenAdvisories

Package · Maven

org.jbpm.jbpm5:jbpmmigration

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    XML External Entity Reference in jbpmmigration

    It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potential…