Description
An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.opencrx:opencrx-client | < 5.3.0 | 5.3.0 | GHSA-q74f-rf27-8hxc |