Xxe

Jeesite 1.2.7 is affected by: XML External Entity XXE. The impact is: sensitive information disclosure. The component is: convertToModel function in src/main/java/com.thinkgem.jeesite/modules/act/service/ActProcessService.java. The attack vector is: network connectivity,authenticated,must upload ...

CVE-2019-1010202

CVE-2019-1010202 affects Jeesite 1.2.7 and is due to a XML External Entity (XXE) flaw in the convertToModel() implementation of ActProcessService.java. The vulnerability can lead to sensitive information disclosure. The attack vector requires network connectivity with authentication and the attac...