Vulnerability of the ManifestParser and AmazonS3 classes in the Git version control system for the Java Eclipse JGit language, allowing attackers to perform XXE attacks

The vulnerability of the ManifestParser and AmazonS3 classes in the Git version control system, implemented in the Java Eclipse JGit framework, is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attack...