Apache Commons Digester 3.2 XML Injection

Apache Commons Digester version 3.2 contains an XML external entity vulnerability that may lead to local file disclosure, server-side request forgery, or entity-expansion denial of service when untrusted XML is parsed. Apache Commons Digester 3.2 XXE Vulnerability Vendor: The Apache Software...

Apache Commons Digester 3.2 XXE Vulnerability

Summary Apache Commons Digester is a Java library from the Apache Commons project that converts XML documents into trees of Java objects. Description Apache Commons Digester creates its SAX parser factory with no protections against document type definitions or external entities, and the default...

Fedora: Security Advisory for apache-commons-digester (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XML Entity Injection Vulnerability in Apache Commons-digester Component

Apache is web server software.Commons-digester is Apache is a component that converts XML into JAVA beans. An XML entity injection vulnerability exists in the Apache Commons-digester component. By constructing malicious content, an attacker can cause arbitrary files to be read and system commands...