CVE-2021-47621

2024-06-2106:15:10

Google

osv.dev

classgraph

xxe attack

software

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

ClassGraph before 4.8.112 was not resistant to XML eXternal Entity (XXE) attacks.

CPENameOperatorVersion
classgrapheqfast-classpath-scanner-2.11.1
classgrapheqfast-classpath-scanner-1.9.12
classgrapheqfast-classpath-scanner-1.9.17
classgrapheqfast-classpath-scanner-2.4.0
classgrapheqclassgraph-4.2.8
classgrapheqclassgraph-4.8.16
classgrapheqfast-classpath-scanner-1.9.7
classgrapheqclassgraph-4.8.67
classgrapheqclassgraph-4.8.33
classgrapheqclassgraph-4.8.29

Name	Operator	Version
classgraph	eq	fast-classpath-scanner-2.11.1
classgraph	eq	fast-classpath-scanner-1.9.12
classgraph	eq	fast-classpath-scanner-1.9.17
classgraph	eq	fast-classpath-scanner-2.4.0
classgraph	eq	classgraph-4.2.8
classgraph	eq	classgraph-4.8.16
classgraph	eq	fast-classpath-scanner-1.9.7
classgraph	eq	classgraph-4.8.67
classgraph	eq	classgraph-4.8.33
classgraph	eq	classgraph-4.8.29