PT-2018-11823

Name of the Vulnerable Software and Affected Versions WeChat Pay Java SDK affected versions not specified Description The issue involves an XXE XML External Entity attack through a merchant notification URL in the WXPayUtil component of the WeChat Pay Java SDK. Recommendations At the moment, ther...

CVE-2018-13439: Improper Restriction of XML External Entity Reference

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...