Description
jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | ro.pippo:pippo-core | < 1.12.0 | 1.12.0 | GHSA-rmm5-g63h-m6g9 |
Critical · 9.8
CVE-2018-20059
EUVD-2018-0820GHSA-rmm5-g63h-m6g9
Improper Restriction of XML External Entity Reference in pippo-core
Published Dec 11, 2018 · Updated Sep 16, 2024 · Assigned by mitre