1 matches found
MGASA-2020-0051 Updated c3p0 packages fix security vulnerabilities
An XML external entity processing vulnerability was found in extractXmlConfigFromInputStream function in c3p0 CVE-2018-20433. c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading...
9.8CVSS8.3AI score0.04882EPSS
SaveExploits1References3
20