CVE-2018-20059

2018-12-1110:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

JSON

jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

CPENameOperatorVersion
pippoeqpippo-parent-0.3.0
pippoeqrelease-1.9.0
pippoeqrelease-1.8.0
pippoeqrelease-1.11.0
pippoeqrelease-0.7.0
pippoeqrelease-0.6.0
pippoeqpippo-parent-0.2.0
pippoeqrelease-0.9.0
pippoeqrelease-1.7.0
pippoeqrelease-1.3.0

Name	Operator	Version
pippo	eq	pippo-parent-0.3.0
pippo	eq	release-1.9.0
pippo	eq	release-1.8.0
pippo	eq	release-1.11.0
pippo	eq	release-0.7.0
pippo	eq	release-0.6.0
pippo	eq	pippo-parent-0.2.0
pippo	eq	release-0.9.0
pippo	eq	release-1.7.0
pippo	eq	release-1.3.0