Lucene search
+L

1 matches found

OSV
OSV
added 2020/01/28 7:52 a.m.9 views

MGASA-2020-0051 Updated c3p0 packages fix security vulnerabilities

An XML external entity processing vulnerability was found in extractXmlConfigFromInputStream function in c3p0 CVE-2018-20433. c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading...

9.8CVSS8.3AI score0.04882EPSS
SaveExploits1References3
Rows per page
Query Builder