CVE-2014-125087 – com.jamesmurty.utils:java-xmlbuilder

Package

Manager: maven
Name: com.jamesmurty.utils:java-xmlbuilder
Vulnerable Version: >=0 <1.2

Severity

Level: Critical

CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.00084 pctl0.25419

Details

java-xmlbuilder vulnerable to XML External Entity Reference A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is e6fddca201790abab4f2c274341c0bb8835c3e73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221480.

Metadata

Created: 2023-02-19T18:30:21Z
Modified: 2024-03-01T14:29:18Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-3vrc-rrpw-r5pw/GHSA-3vrc-rrpw-r5pw.json
CWE IDs: ["CWE-611"]
Alternative ID: GHSA-3vrc-rrpw-r5pw
Finding: F083
Auto approve: 1