Description
An XML External Entity (XXE) vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.wutka:jox | <= 1.16 | — | GHSA-fcrx-8829-jpqx |
Medium
CVE-2021-43142
EUVD-2022-1721GHSA-fcrx-8829-jpqx
Improper Restriction of XML External Entity Reference in wutka jox
Published Mar 30, 2022 · Updated Aug 4, 2024 · Assigned by mitre