Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-15531 EUVD-2018-0517GHSA-6fvx-r7hx-3vh6

JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

Published Sep 26, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Package: net.bull.javamelody:javamelody-core Ecosystem: Maven

Description

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven net.bull.javamelody:javamelody-core < 1.74.0 1.74.0 GHSA-6fvx-r7hx-3vh6

References