PT-2022-18988

Name of the Vulnerable Software and Affected Versions Eclipse Sphinx versions prior to 0.13.1 Description The issue allows the injection of arbitrary definitions, enabling access to local files and exposing their contents via HTTP requests due to the use of Apache Xerces XML Parser without...