Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-43090 EUVD-2022-1503GHSA-pv39-qp28-4mgh

Improper Restriction of XML External Entity Reference in soa-model

Published Mar 25, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Package: com.predic8:soa-model-core Package: com.predic8:soa-model-parent Ecosystem: Maven

Description

An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.predic8:soa-model-core < 1.6.4 1.6.4 GHSA-pv39-qp28-4mgh
Maven com.predic8:soa-model-parent < 1.6.4 1.6.4 GHSA-pv39-qp28-4mgh

References