Improper Restriction of XML External Entity Reference in Stanford CoreNLP

2022-05-2419:18:01

Google

osv.dev

0.002 Low

EPSS

Percentile

55.8%

JSON

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CPENameOperatorVersion
edu.stanford.nlp:stanford-corenlpeq3.5.0
edu.stanford.nlp:stanford-corenlpeq3.3.0
edu.stanford.nlp:stanford-corenlpeq3.2.0
edu.stanford.nlp:stanford-corenlpeq1.3.1
edu.stanford.nlp:stanford-corenlpeq1.3.3
edu.stanford.nlp:stanford-corenlpeq3.4
edu.stanford.nlp:stanford-corenlpeq1.2.0
edu.stanford.nlp:stanford-corenlpeq3.4.1
edu.stanford.nlp:stanford-corenlpeq4.2.0
edu.stanford.nlp:stanford-corenlpeq1.3.4

Name	Operator	Version
edu.stanford.nlp:stanford-corenlp	eq	3.5.0
edu.stanford.nlp:stanford-corenlp	eq	3.3.0
edu.stanford.nlp:stanford-corenlp	eq	3.2.0
edu.stanford.nlp:stanford-corenlp	eq	1.3.1
edu.stanford.nlp:stanford-corenlp	eq	1.3.3
edu.stanford.nlp:stanford-corenlp	eq	3.4
edu.stanford.nlp:stanford-corenlp	eq	1.2.0
edu.stanford.nlp:stanford-corenlp	eq	3.4.1
edu.stanford.nlp:stanford-corenlp	eq	4.2.0
edu.stanford.nlp:stanford-corenlp	eq	1.3.4