Lucene search
GoogleOSV:CVE-2017-9096HistoryNov 08, 2017 - 4:29 p.m.
CVE-2017-9096
2017-11-0816:29:00
Google
osv.dev
11
The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.
References
Related
ibm
ibm
osv
osv
Improper Restriction of XML External Entity Reference in iText
2022-05-13 01:14:24
github
github
Improper Restriction of XML External Entity Reference in iText
2022-05-13 01:14:24
nvd
nvd
CVE-2017-9096
2017-11-08 16:29:00
veracode
veracode
XML External Entity (XXE) Injection
2017-11-29 00:51:29
cvelist
cvelist
CVE-2017-9096
2017-11-08 16:00:00
redhatcve
redhatcve
CVE-2017-9096
2017-11-14 08:49:40
prion
prion
Xxe
2017-11-08 16:29:00
cve
cve
CVE-2017-9096
2017-11-08 16:29:00
zdt
zdt
iText PDF Library 7.0.2 / 5.5.11 / 2.0.8 XXE Injection Vulnerability
2017-11-09 00:00:00
nessus
nessus
Oracle Primavera Unifier (Oct 2020 CPU)
2020-10-21 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00