Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/12/25 12:34 a.m.•32 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS6.9AI score0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/24 6:15 a.m.•22 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS0.002EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/24 12:00 a.m.•17 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS6.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/12/24 12:00 a.m.•11 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS5.8AI score0.002EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•3 views

CVE-2024-58335: Improper Restriction of XML External Entity Reference

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS5.8AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 12:00 a.m.•43 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS0.002EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/24 12:00 a.m.•32 views

CVE-2024-58335

OpenXRechnungToolbox: AXXE vulnerability exists in versions through 2024-10-05-3.0.0 up to commit 6c50e89, caused by the disallow-doctype-decl feature not being enabled in visualization/VisualizerImpl.java. The issue enables external entity processing and is supported by multiple sources; exploit...

5CVSS5.8AI score0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•15 views

OpenXRechnungToolbox 代码问题漏洞

OpenXRechnungToolbox is a graphical user interface for visualizing and validating electronic invoices by Dr. Jan C. Thiele Personal Developer. A code issue vulnerability exists in OpenXRechnungToolbox version 2024-10-05-3.0.0 up to and including 6c50e89, which stems from the disallow-doctype-decl...

5CVSS6.9AI score0.002EPSS
SaveExploits0References3
Rows per page
Query Builder