Package · Maven

org.opennms.core:org.opennms.core.xml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2023-0871

An XML External Entity injection vulnerability

XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity (XXE) injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to inte…

The OpenNMS Group Meridian Horizon org.opennms.core:org.opennms.core.xml Maven

Aug 11, 2023