Product · Apache

Olingo

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.5

CVE-2019-17554 Public exploit EPSS 12%

Improper Restriction of XML External Entity Reference in Apache Olingo

The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with content type "application/xml", which trigger the deserialization of entities, can be used to trigger…

Apache Olingo org.apache.olingo:odata-client-core org.apache.olingo:odata-server-core Maven

Dec 4, 2019