Skip to content
OpenAdvisories

Vendor

veraPDF

7 known vulnerabilities.

Products

veraPDF-validation 3 veraPDF-parser 2 veraPDF-library 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2024-52800 Public exploit

    Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI

    veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution (RCE) vulnerability. This doesn't affect the standard va…

    veraPDF veraPDF-library org.verapdf:verapdf-library-jakarta org.verapdf:library Maven