6 matches found
CVE-2019-5312
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...
CVE-2019-5312
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...
CVE-2019-5312: Improper Restriction of XML External Entity Reference
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...
CVE-2018-20318
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...
PT-2018-15307
Name of the Vulnerable Software and Affected Versions weixin-java-tools version 3.2.0 Description An issue was discovered in the getXmlDoc method of the BaseWxPayResult.java file, which contains an XXE vulnerability. Recommendations For weixin-java-tools version 3.2.0, consider disabling the...
CVE-2018-20318: Improper Restriction of XML External Entity Reference
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...