Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-4690 EUVD-2024-44290GHSA-vfmw-mcw8-m32f

Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by OpenText

Description

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

Affected products

VendorProductAffectedFixed
OpenText OpenText Application Automation Tools 24.1.0 and below —

Advisories 1

References