dom4j:DOMReaderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/dom4j/dom4j.git Detailed Report: https://oss-fuzz.com/testcase?key=6496868914561024 Project: dom4j Fuzzing Engine: libFuzzer Fuzz Target: DOMReaderFuzzer Job Type: libfuzzerasandom4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

dom4j:DOMReaderFuzzer: Security exception in org.dom4j.io.DOMReader.readTree

Project: https://github.com/dom4j/dom4j.git Detailed Report: https://oss-fuzz.com/testcase?key=4855568405233664 Project: dom4j Fuzzing Engine: libFuzzer Fuzz Target: DOMReaderFuzzer Job Type: libfuzzerasandom4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

in stanfordnlp/corenlp

Description The Stanford CoreNLP package provides a set of natural language analysis tools written in Java, is using a vulnerable XML External Entity XXE. An attacker that is able to provide a crafted XML file as input to the readDocument function in the "DomReader.java" file may allow an attacke...