Lucene search

K
osvGoogleOSV:GHSA-99WH-973F-779P
HistoryMar 04, 2022 - 12:00 a.m.

XML External Entity Reference in Hazelcast

2022-03-0400:00:15
Google
osv.dev
15

0.002 Low

EPSS

Percentile

57.2%

The AbstractXmlConfigRootTagRecognizer() function makes use of SAXParser generated from a SAXParserFactory with no FEATURE_SECURE_PROCESSING set, allowing for XXE attacks.

CPENameOperatorVersion
com.hazelcast:hazelcasteq5.1-BETA-1

0.002 Low

EPSS

Percentile

57.2%