Description
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.github.wxpay:wxpay-sdk | <= 3 | — | GHSA-gqgv-2gp3-qqp3 |
High · 7.5
CVE-2018-13439
EUVD-2022-3991GHSA-gqgv-2gp3-qqp3
WeChat Pay Java SDK allows XXE
Published Jul 8, 2018 · Updated Aug 5, 2024 · Assigned by mitre