Lucene search
PRIOn knowledge basePRION:CVE-2017-7545HistoryJul 26, 2018 - 3:29 p.m.
Xxe
2018-07-2615:29:00
PRIOn knowledge base
www.prio-n.com
2
It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| decision_manager | eq | 7.0 | |
| jboss_bpm_suite | eq | 6.4 | |
| jbpm | eq | 6.5 |
Related
osv
osv
CVE-2017-7545
2018-07-26 15:29:00
XML External Entity Reference in jbpmmigration
2022-05-13 01:36:17
nvd
nvd
CVE-2017-7545
2018-07-26 15:29:00
cve
cve
CVE-2017-7545
2018-07-26 15:29:00
redhatcve
redhatcve
CVE-2017-7545
2017-11-30 16:19:37
github
github
XML External Entity Reference in jbpmmigration
2022-05-13 01:36:17
cvelist
cvelist
CVE-2017-7545
2018-07-26 15:00:00
redhat
redhat
(RHSA-2017:3354) Moderate: Red Hat JBoss BRMS 6.4.7 security update
2017-11-30 16:29:58
(RHSA-2017:3355) Moderate: Red Hat JBoss BPM Suite 6.4.7 security update
2017-11-30 16:30:18