Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/17 12:29 a.m.6 views

GHSA-H22X-HM8G-RXPG Improper Restriction of XML External Entity Reference in Apache OpenNLP

When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache...

9.8CVSS7.2AI score0.03016EPSS
SaveExploits5References2
Rows per page
Query Builder