XML External Entity (XXE)

Apache PDFBox is vulnerable to XML external entity XXE attacks. The XML parser does not disable external DTDs, which would allow an attacker to perform XXE attacks using a malicious XFDF file...

PT-2019-5795

Name of the Vulnerable Software and Affected Versions Apache PDFBox version 2.0.14 Description The issue is related to the incorrect restriction of XML external entity references in the Java library Apache PDFBox. This can be exploited by a remote attacker to conduct XML External Entity XXE attac...