Product · Apache Software Foundation

Apache Karaf

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-11788 Public exploit

XML External Entity Reference in Apache Karaf

Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitiga…

Apache Software Foundation Apache Karaf org.apache.karaf.specs:org.apache.karaf.specs.java.xml Maven

Jan 7, 2019