Lucene search
+L

1 matches found

OSV
OSV
added 2024/12/02 5:15 p.m.8 views

GHSA-4CX5-89VM-833X veraPDF CLI has potential XXE (XML External Entity Injection) vulnerability

Impact Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. Patches We are currently working on a patch that will be released when ready. Workarounds This doesn't affect the standa...

2.3CVSS6.4AI score0.01063EPSS
SaveExploits0References4
Rows per page
Query Builder