Critical · 9.8 CVE-2024-51136 EUVD-2024-45288GHSA-9jcp-9vh9-r3w5

An XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbi…

Published Nov 4, 2024 · Updated Nov 5, 2024 · Assigned by mitre

Description

An XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file.

References

https://github.com/openimaj/openimaj
https://github.com/openimaj/openimaj/issues/382
https://mvnrepository.com/artifact/org.openimaj.tools/WebTools