Description
Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | MarkLogic Server | 11.0.0 – < 11.3.7 | 11.3.7 |