Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-16999 EUVD-2026-57212GHSA-vw7v-jmvx-4grc

XXE in Ministry of Justice's UYAP Document Editor

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by TR-CERT

Description

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking.

This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17.

Affected products

VendorProductAffectedFixed
Ministry of Justice UYAP Document Editor 4.5.17 – < 5.4.17 5.4.17

References