Product · Apache

Apache Santuario - XML Security for Java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.5

CVE-2019-12400

Improper input validation in Apache Santuario XML Security for Java

In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread…

Apache Apache Santuario - XML Security for Java org.apache.santuario:xmlsec libxml-security-java Debian Ubuntu Maven

Aug 23, 2019