Lucene search

K
osvGoogleOSV:USN-6274-1
HistoryAug 03, 2023 - 2:45 p.m.

xmltooling vulnerability

2023-08-0314:45:50
Google
osv.dev
3
xmltooling
keyinfo
vulnerability
server-side
request
forgery

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

Jurien de Jong discovered that XMLTooling did not properly handle certain
KeyInfo element content within an XML signature. An attacker could possibly
use this issue to achieve server-side request forgery.

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%