Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Ivy

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2022-46751

    Apache Ivy: XML External Entity vulnerability in Apache Ivy

    Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML file…

    Apache Software Foundation Apache Ivy org.apache.ivy:ivy Maven
  • High 7.5
    CVE-2022-37866

    Apache Ivy allows path traversal in the presence of a malicious repository

    When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or version. If said coordinates contain "../…

    Apache Software Foundation Apache Ivy org.apache.ivy:ivy Maven