Medium · 5.9 CVE-2024-4184 EUVD-2024-32740GHSA-8mj2-x5qq-7m6c

Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by OpenText

Vendor: OpenText Product: OpenText Application Automation Tools

Description

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

Affected products

Vendor	Product	Affected	Fixed
OpenText	OpenText Application Automation Tools	24.1.0 and below	—

Advisories 1

WID-SEC-2024-1234 Jenkins Plugins: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 26, 2024

References

https://portal.microfocus.com/s/article/KM000033540?language=en_US