Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/12/25 12:34 a.m.4 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS6.9AI score0.00037EPSS
Exploits0References1
NVD
NVD
added 2025/12/24 6:15 a.m.3 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS0.00037EPSS
Exploits0References2
OSV
OSV
added 2025/12/24 6:15 a.m.1 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS6.8AI score
Exploits0References2
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.1 views

OpenXRechnungToolbox 代码问题漏洞

OpenXRechnungToolbox is a graphical user interface for visualizing and validating electronic invoices by Dr. Jan C. Thiele Personal Developer. A code issue vulnerability exists in OpenXRechnungToolbox version 2024-10-05-3.0.0 up to and including 6c50e89, which stems from the disallow-doctype-decl...

5CVSS6.9AI score0.00037EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/24 12:0 a.m.1 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS6.5AI score0.00037EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/24 12:0 a.m.23 views

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

5CVSS0.00037EPSS
Exploits0References2
CVE
CVE
added 2025/12/24 12:0 a.m.6 views

CVE-2024-58335

OpenXRechnungToolbox: AXXE vulnerability exists in versions through 2024-10-05-3.0.0 up to commit 6c50e89, caused by the disallow-doctype-decl feature not being enabled in visualization/VisualizerImpl.java. The issue enables external entity processing and is supported by multiple sources; exploit...

5CVSS6.5AI score0.00037EPSS
Exploits0References2
Rows per page
Query Builder